CVE-2014-0224
published 2014-06-05CVE-2014-0224: OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows…
PriorityP184high7.4CVSS 3.1
AVNACHPRNUINSUCHIHAN
ITWEXPLOITVulnCheck KEVInitial access
Exploited in the wild
EPSS
95.33%
99.9th percentile
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | products | — | — |
| debian | openssl | < openssl 1.0.1h-1 (bookworm) | openssl 1.0.1h-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| filezilla-project | filezilla_server | < 0.9.45 | 0.9.45 |
| mariadb | mariadb | >= 10.0.0 < 10.0.13 | 10.0.13 |
| nodejs | node.js | < 0.10.29 | 0.10.29 |
| openssl | openssl | < 0.9.8za | 0.9.8za |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.3 | 1.0.1f-1ubuntu2.3 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.4 | 1.0.1f-1ubuntu2.4 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.2 | 1.0.1f-1ubuntu2.2 |
| openssl | openssl | >= 1.0.0 < 1.0.0m | 1.0.0m |
| openssl | openssl | >= 1.0.1 < 1.0.1h | 1.0.1h |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| paloalto | cortex_xdr | — | — |
| paloalto | pan-os | — | — |
| python | python | >= 2.7.0 < 2.7.8 | 2.7.8 |
| python | python | >= 3.4.0 < 3.4.2 | 3.4.2 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
Detection & IOCsextracted from sources · hover to see the quote
urlhttps://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_ccs.rb↗
- →Detect early/unexpected ChangeCipherSpec (CCS) messages sent during TLS session negotiation before key material is established — this is the core exploit primitive for CVE-2014-0224. ↗
- →Both the client and server must be running vulnerable OpenSSL for the attack to succeed; focus detection on OpenSSL-to-OpenSSL TLS sessions where a zero-length master key may be negotiated. ↗
- →Use Metasploit auxiliary module auxiliary/scanner/ssl/openssl_ccs to actively probe servers for acceptance of premature CCS messages. ↗
- →Flag TLS handshakes where a ChangeCipherSpec message is received before the Finished message / key exchange is complete, indicating a potential CCS injection attempt. ↗
- →Use passive network monitoring (e.g., Nessus Network Monitor / PVS) to identify hosts advertising vulnerable OpenSSL versions (< 0.9.8za, < 1.0.0m, < 1.0.1h) in TLS banners. ↗
- ·Desktop browsers (IE, Chrome, Firefox, Safari) are NOT vulnerable as they do not use OpenSSL; Chrome for Android does use OpenSSL and was vulnerable — scope detection to OpenSSL-based TLS endpoints. ↗
- ·Only devices terminating SSL/TLS connections (acting as SSL/DTLS server or client) are affected; devices merely passing through SSL/DTLS traffic without terminating it are not affected. ↗
CVSS provenance
nvdv3.17.4HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv7.4HIGH
vulncheck7.4HIGH
vendor_cisco10.0CRITICAL
vendor_debian7.4HIGH
vendor_redhat7.4HIGH
vendor_ubuntu6.8MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-84gm-v5wh-659w: OpenSSL before 0
ghsa_unreviewed·2022-05-13
CVE-2014-0224 [HIGH] CWE-326 GHSA-84gm-v5wh-659w: OpenSSL before 0
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
OSV
openssl regression
osv·2014-06-23·CVSS 6.8
CVE-2014-0224 [MEDIUM] openssl regression
openssl regression
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
renegotiation, such as PostgreSQL. This update fixes the problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL incorrectly h
OSV
openssl regression
osv·2014-06-12·CVSS 6.8
CVE-2014-0224 [MEDIUM] openssl regression
openssl regression
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
tls_session_secret_cb, such as wpa_supplicant. This update fixes the
problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL i
OSV
CVE-2014-0224: OpenSSL before 0
osv·2014-06-05·CVSS 7.4
CVE-2014-0224 [HIGH] CVE-2014-0224: OpenSSL before 0
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
OSV
openssl vulnerabilities
osv·2014-06-05·CVSS 6.8
CVE-2014-0195 [MEDIUM] openssl vulnerabilities
openssl vulnerabilities
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL incorrectly handled certain
handshakes. A remote attacker could use this flaw to perform a
machine-in-the-middle attack and possibly decrypt and modify traffic.
(CVE-2014-0224)
Felix Gröbert and Ivan Fratrić discovered that OpenSSL inco
VulnCheck
OpenSSL OpenSSL Inadequate Encryption Strength
vulncheck·2014·CVSS 7.4
CVE-2014-0224 [HIGH] OpenSSL OpenSSL Inadequate Encryption Strength
OpenSSL OpenSSL Inadequate Encryption Strength
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
Affected: OpenSSL OpenSSL
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://www.fortinet.com/content/dam/fortinet/assets/threat-reports/threat-landscape-report-2h-2023.pdf
Exploit PoC: https://vulncheck.com/x
Palo Alto
PAN-SA-2024-0014 Informational Bulletin: Impact of OSS CVEs in Cortex XDR Agent
vendor_paloalto·2024-11-07·CVSS 6.8
CVE-2014-0195 [MEDIUM] PAN-SA-2024-0014 Informational Bulletin: Impact of OSS CVEs in Cortex XDR Agent
PAN-SA-2024-0014 Informational Bulletin: Impact of OSS CVEs in Cortex XDR Agent
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to Cortex XDR Agent. While Cortex XDR Agent may include the
CVEs: CVE-2014-0195, CVE-2014-0224, CVE-2014-3509, CVE-2014-3512, CVE-2014-3513, CVE-2014-3567, CVE-2015-0209, CVE-2015-0292, CVE-2015-1789, CVE-2015-1791, CVE-2015-1793, CVE-2015-3194, CVE-2016-0705, CVE-2016-0797, CVE-2016-0798, CVE-2016-0799, CVE-2016-2105, CVE-2016-2106, CVE-2016-2108, CVE-2016-2109, CVE-2016-2176, CVE-2016-2177, CVE-2016-2179, CVE-2016-2180, CVE-2016-2181, CVE-2016-2182, CVE-2016-2183, CVE-2016-6302, CVE-2016-6303, CVE-2016-6304, CVE-2019-1551, CVE-2019-1552, CVE-2019-1559, CVE-2019-1563, CVE-2020-196
CISA ICS
Rockwell Automation Stratix 5900
cisa_ics·2017-05-10
Rockwell Automation Stratix 5900
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Rockwell Automation Stratix 5900
Last RevisedMay 10, 2017
Alert CodeICSA-17-094-04
## CVSS v3 10.0
ATTENTION: Remotely exploitable/low skill level to exploit.
Vendor: Rockwell Automation
Equipment: Stratix 5900
Vulnerabilities: Improper Input Validation, Resource Management Errors, Improper Authentication, Path Traversal.
## REPOSTED INFORMATION
This advisory was originally posted to the NCCIC Portal on April 4, 2017, and is being released to the NCCIC/ICS-CERT web site.
## AFFECTED PRODUCTS
Rockwell Automation reports that these vulnerabilities affect the following Strat
CISA ICS
Siemens OpenSSL Vulnerabilities (Update G)
cisa_ics·2014-10-16
Siemens OpenSSL Vulnerabilities (Update G)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens OpenSSL Vulnerabilities (Update G)
Last RevisedAugust 29, 2018
Alert CodeICSA-14-198-03G
## OVERVIEW
This updated advisory is a follow-up to the updated advisory titled ICSA-14-198-03F Siemens OpenSSL Vulnerabilities that was published October 16, 2014, on the NCCIC/ICS-CERT web site.
## --------- Begin Update G Part 1 of 3 --------
Siemens has identified four vulnerabilities in its OpenSSL cryptographic software library affecting several Siemens industrial products. Updates are available for APE 2.0.2, S7-1500, WinCC OA (PVSS), CP1543-1, Ruggedcom ROX 1, and ROX 2-bas
Ubuntu
OpenSSL regression
vendor_ubuntu·2014-08-18·CVSS 6.8
[MEDIUM] OpenSSL regression
Title: OpenSSL regression
Summary: USN-2232-1 introduced a regression in OpenSSL.
USN-2232-1 fixed vulnerabilities in OpenSSL. One of the patch backports for
Ubuntu 10.04 LTS caused a regression for certain applications. This update
fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service.
Ubuntu
OpenSSL regression
vendor_ubuntu·2014-06-23·CVSS 6.8
CVE-2014-0224 [MEDIUM] OpenSSL regression
Title: OpenSSL regression
Summary: USN-2232-1 introduced a regression in OpenSSL.
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
renegotiation, such as PostgreSQL. This update fixes the problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2
Ubuntu
OpenSSL regression
vendor_ubuntu·2014-06-12·CVSS 6.8
CVE-2014-0224 [MEDIUM] OpenSSL regression
Title: OpenSSL regression
Summary: USN-2232-1 introduced a regression in OpenSSL.
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
tls_session_secret_cb, such as wpa_supplicant. This update fixes the
problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of ser
Palo Alto
OpenSSL Man-in-the-middle vulnerability
vendor_paloalto·2014-06-09·CVSS 7.4
CVE-2014-0224 [HIGH] CWE-310 OpenSSL Man-in-the-middle vulnerability
OpenSSL Man-in-the-middle vulnerability
The Palo Alto Networks product security engineering team has completed analysis of our products' exposure to the vulnerabilities described in the OpenSSL Security Advisory dated June 5th, 2014. Of the 7 CVEs highlighted in the advisory, only CVE-2014-0224 is relevant to our software. The remaining vulnerabilities to not apply because we do not use or support use of Datagram Transport Layer Security (DTLS), nor do we use anonymous Elliptic curve Diffie-Hellman (ECDH) on our software clients. Our exposure to CVE-2014-0224 is limited because both client and server must be vulnerable. While our client-side is vulnerable, the server-side is not. This limits exposure to potential man-in-the-middle (MITM) attacks only to sessions our software initiates wit
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2014-06-05·CVSS 6.8
CVE-2014-0195 [MEDIUM] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL incorrectly handled certain
handshakes. A remote attacker could use this flaw to perform a
machine-in-the-middle attack and possibly decrypt and modify traffic.
(CVE-2014-02
Cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
vendor_cisco·2014-06-05·CVSS 10.0
CVE-2010-5298 [CRITICAL] Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service (DoS) condition, or perform a man-in-the-middle attack. On June 5, 2014, the OpenSSL Project released a security advisory detailing seven distinct vulnerabilities. The vulnerabilities are referenced in this document as follows:
SSL/TLS Man-in-the-Middle Vulnerability
DTLS Recursion Flaw Vulnerability
DTLS Invalid Fragment Vulnerability
SSL_MODE_RELEASE_BUFFERS NULL Pointer Dereference Vulnerability
SSL_MODE_RELEASE_BUFFERS Session Injection or Denial of Service Vulnerability
Anonymous ECDH Denial of Service Vulnerab
BSD
FreeBSD-SA-14:14.openssl: OpenSSL multiple vulnerabilities
bsd_advisories·2014-06-05·CVSS 6.8
CVE-2014-0195 [MEDIUM] FreeBSD-SA-14:14.openssl: OpenSSL multiple vulnerabilities
FreeBSD-SA-14:14.openssl Security Advisory
The FreeBSD Project
Topic: OpenSSL multiple vulnerabilities
Category: contrib
Module: openssl
Announced: 2014-06-05
Affects: All supported versions of FreeBSD.
Corrected: 2014-06-05 12:32:38 UTC (stable/10, 10.0-STABLE)
2014-06-05 12:33:23 UTC (releng/10.0, 10.0-RELEASE-p5)
2014-06-05 12:53:06 UTC (stable/9, 9.3-BETA1)
2014-06-05 12:53:06 UTC (stable/9, 9.3-BETA1-p2)
2014-06-05 12:33:23 UTC (releng/9.2, 9.2-RELEASE-p8)
2014-06-05 12:33:23 UTC (releng/9.1, 9.1-RELEASE-p15)
2014-06-05 12:32:38 UTC (stable/8, 8.4-STABLE)
2014-06-05 12:33:23 UTC (releng/8.4, 8.4-RELEASE-p12)
CVE Name: CVE-2014-0195, CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above,
Red Hat
openssl: SSL/TLS MITM vulnerability
vendor_redhat·2014-06-05·CVSS 7.4
CVE-2014-0224 [HIGH] CWE-841 openssl: SSL/TLS MITM vulnerability
openssl: SSL/TLS MITM vulnerability
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server.
Package: guest-images (Red Hat Enterprise Linux 6) - Not affected
Package: mingw-virt-viewer (Red
Debian
CVE-2014-0224: openssl - OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not pr...
vendor_debian·2014·CVSS 7.4
CVE-2014-0224 [HIGH] CVE-2014-0224: openssl - OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not pr...
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
Scope: local
bookworm: resolved (fixed in 1.0.1h-1)
bullseye: resolved (fixed in 1.0.1h-1)
forky: resolved (fixed in 1.0.1h-1)
sid: resolved (fixed in 1.0.1h-1)
trixie: resolved (fixed in 1.0.1h-1)
Cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
vendor_cisco
CVE-2014-0224 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
CVE-2014-0224: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service (DoS) condition, or perform a man-in-the-middle attack. On June 5, 2014, the OpenSSL Project released a security advisory detailing seven distinct vulnerabilities. The vulnerabilities are referenced in this document as follows: SSL/TLS Man-in-the-Middle Vulnerability DTLS Recursion Flaw Vulnerability DTLS Invalid Fragment Vulnerability SSL_MODE_RELEASE_BUFFERS NULL Pointer Dereference Vulnerability SSL_MODE_RELEASE_BUFFERS Session Injection or Denial of Service Vulnerability Anonymous ECDH Denial of Ser
No detection rules found.
HackerOne
CVE-2014-0224 openssl ccs vulnerability
hackerone·2015-04-10·CVSS 7.4
CVE-2014-0224 [HIGH] CVE-2014-0224 openssl ccs vulnerability
CVE-2014-0224 openssl ccs vulnerability
your site is vulnerable to CVE-2014-0224
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
Bugzilla
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [epel-7]
bugzilla·2014-08-07·CVSS 4.0
CVE-2014-0221 [MEDIUM] CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [epel-7]
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [epel-7]
The unfixed package from Fedora was added to EPEL-7.
+++ This bug was initially created as a clone of Bug #1096234 +++
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relev
Bugzilla
CVE-2014-3470 CVE-2014-0221 CVE-2014-0224 CVE-2014-0195 mingw32-openssl: various flaws [epel-5]
bugzilla·2014-08-07·CVSS 6.8
CVE-2014-3470 [MEDIUM] CVE-2014-3470 CVE-2014-0221 CVE-2014-0224 CVE-2014-0195 mingw32-openssl: various flaws [epel-5]
CVE-2014-3470 CVE-2014-0221 CVE-2014-0224 CVE-2014-0195 mingw32-openssl: various flaws [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-5 tracking bug for mingw32-o
Bugzilla
CVE-2014-0224 openssl: SSL/TLS MITM vulnerability
bugzilla·2014-06-02·CVSS 7.4
CVE-2014-0224 [HIGH] CVE-2014-0224 openssl: SSL/TLS MITM vulnerability
CVE-2014-0224 openssl: SSL/TLS MITM vulnerability
It was found that OpenSSL was vulnerable to a SSL/TLS MITM vulnerability. An attacker using a carefully crafted handshake can force the use of weak keying material in OpenSSL SSL/TLS clients and servers. This can be exploited by a Man-in-the-middle (MITM) attack where the attacker can decrypt and modify traffic from the attacked client and server.
As per the upstream advisory:
The attack can only be performed between a vulnerable client *and* server. OpenSSL clients are vulnerable in all versions of OpenSSL. Servers are only known to be vulnerable in OpenSSL 1.0.1 and 1.0.2-beta1. Users of OpenSSL servers earlier than 1.0.1 are advised to upgrade as a precaution.
OpenSSL 0.9.8 SSL/TLS users (client and/or server) should upgrade to 0.9.8
Bugzilla
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 openssl: various flaws [fedora-all]
bugzilla·2014-05-09·CVSS 4.0
CVE-2014-0221 [MEDIUM] CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 openssl: various flaws [fedora-all]
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 openssl: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when avai
Bugzilla
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [fedora-all]
bugzilla·2014-05-09·CVSS 4.0
CVE-2014-0221 [MEDIUM] CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [fedora-all]
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field whe
Tenable
Nessus 5.2.7 and PVS 4.0.3 Are Available for Download
blogs_tenable·2014-06-12
Nessus 5.2.7 and PVS 4.0.3 Are Available for Download
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
Nessus 5.2.7 and PVS 4.0.3 Are Available for Download
blogs_tenable·2014-06-12·CVSS 7.4
[HIGH] Nessus 5.2.7 and PVS 4.0.3 Are Available for Download
Blog /
Subscribe
# Nessus 5.2.7 and PVS 4.0.3 Are Available for Download
Paul Asadoorian
June 12, 2014
2 Min Read
Note: Passive Vulnerability Scanner (PVS) is now Nessus Network Monitor. To learn more about this application and its latest capabilities, visit the Nessus Network Monitor web page.
Nessus® 5.2.7 and Passive Vulnerability Scanner™ 4.0.3 are now available for download.
Today Tenable has released maintenance updates for two separate products, The Nessus vulnerability scanner and the Passive Vulnerability Scanner (PVS™). Customers are strongly encouraged to apply these updates to all instances as it updates the OpenSSL libraries to patch a vulnerability, and in the case of Nessus addresses a couple of minor bug fixes. Its important to stay up-to-date on all Tenable software
Tenable
Detect The Latest OpenSSL Vulnerabilities Using Active and Passive Scanning
blogs_tenable·2014-06-06
Detect The Latest OpenSSL Vulnerabilities Using Active and Passive Scanning
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Tenable
Detect The Latest OpenSSL Vulnerabilities Using Active and Passive Scanning
blogs_tenable·2014-06-06·CVSS 7.4
[HIGH] Detect The Latest OpenSSL Vulnerabilities Using Active and Passive Scanning
Blog /
Subscribe
# Detect The Latest OpenSSL Vulnerabilities Using Active and Passive Scanning
Paul Asadoorian
June 6, 2014
2 Min Read
Tenable's products dig deep to uncover the latest round of OpenSSL vulnerabilities.
Note: Passive Vulnerability Scanner (PVS) is now Nessus Network Monitor. To learn more about this application and its latest capabilities, visit the Nessus Network Monitor web page.
Several new vulnerabilities were disclosed in OpenSSL yesterday (yes the very same one which led to the Heartbleed vulnerability), along with updates for the popular open-source SSL library. One of the vulnerabilities is fairly serious, as it could allow for Man-In-The-Middle attacks under certain circumstances. Interesting notes about this new vulnerability include:
- The most serious vu
Tenable
OpenSSL ChangeCipherSpec Dashboard
blogs_tenable·2014-06-06
OpenSSL ChangeCipherSpec Dashboard
by Steve Tilson June 6, 2014
The OpenSSL ChangeCipherSpec vulnerability is a Man-in-the-Middle attack that can allow an attacker modify the traffic between two hosts during a phase of an SSL/TLS handshake. This flaw could allow a MiTM attacker to decrypt or forge SSL messages by telling the service to begin encrypted communications before key material has been exchanged, which causes predictable keys to be used to secure future traffic. This dashboard identifies systems vulnerable to the OpenSSL ChangeCipherSpec vulnerability.
Man-in-the-Middle (MitM) vulnerabilities allow an attacker to insert themselves into a communication channel. While each of the endpoints assume they are communicating directly with each other, all the traffic is in fact flowing through the attacker. This type of h
arXiv
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
arxiv_fulltext·2025-01-29
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
Chaopeng Dong
Work is done at Nanyang Technological University.
[email protected]
0009-0000-4729-7778
Beijing Key Laboratory of IOT Information Security Technology, Institute of Information Engineering, CAS; School of Cyber Security, University of Chinese Academy of Sciences
Beijing
Beijing
China
Jindong Guo
Institute of Information Engineering, CAS; School of Cyber Security, University of Chinese Academy of Sciences
Beijing
China
[email protected]
Shouguo Yang
Zhongguancun Laboratory
Beijing
China
[email protected]
Yang Xiao
Institute of Information Engineering, CAS; School of Cyber Security, University of Chinese Academy of Sciences
Beijing
China
[email protected]
Yi Li
Nanyang Te
arXiv
Attack of the Clones: Measuring the Maintainability, Originality and Security of Bitcoin 'Forks' in the Wild
arxiv_fulltext·2022-01-21
Attack of the Clones: Measuring the Maintainability, Originality and Security of Bitcoin 'Forks' in the Wild
Attack of the Clones: Measuring the Maintainability, Originality and Security of Bitcoin `Forks' in the Wild
Attack of the Clones
Jusop Choi1 Wonseok Choi1 William Aiken1 Hyoungshick Kim1 Jun Ho Huh2 Taesoo Kim3 Yongdae Kim4 Ross Anderson5
Jusop Choi et al.
Sungkyunkwan University, Republic of Korea Samsung Research, Republic of Korea Georgia Institute of Technology, USA Korea Advanced Institute of Science and Technology, Republic of Korea Cambridge University, UK
## Abstract
Since Bitcoin appeared in 2009, over 6,000 different cryptocurrency projects have followed. The cryptocurrency world may be the only technology where a massive number of competitors offer similar services yet claim unique benefits, including scalability, fast transactions, and security. But are these projects real
arXiv
Secure by default - the case of TLS
arxiv_fulltext·2017-08-24
Secure by default - the case of TLS
Secure by default -- the case of TLS
Martin Stanek \ 1ex]
Department of Computer Science
Comenius University
@dcs.fmph.uniba.sk
## Abstract
Default configuration of various software applications often neglects security objectives.
We tested the default configuration of TLS in dozen web and application servers.
The results show that ``secure by default'' principle should be adopted more broadly
by developers and package maintainers. In addition, system administrators cannot
rely blindly on default security options.
: TLS, secure defaults, testing.
## Introduction
Security often depends on prudent configuration of software components used in a deployed
system. All necessary security controls and options are there, but one have
to turn them on or simply start using them. Unfortunately
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.aschttp://ccsinjection.lepidum.co.jphttp://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.htmlhttp://esupport.trendmicro.com/solution/en-US/1103813.aspxhttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217http://linux.oracle.com/errata/ELSA-2014-1053.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlhttp://lists.opensuse.org/opensuse-updates/2015-02/msg00030.htmlhttp://marc.info/?l=bugtraq&m=140266410314613&w=2http://marc.info/?l=bugtraq&m=140317760000786&w=2http://marc.info/?l=bugtraq&m=140369637402535&w=2http://marc.info/?l=bugtraq&m=140386311427810&w=2http://marc.info/?l=bugtraq&m=140389274407904&w=2http://marc.info/?l=bugtraq&m=140389355508263&w=2http://marc.info/?l=bugtraq&m=140431828824371&w=2http://marc.info/?l=bugtraq&m=140448122410568&w=2http://marc.info/?l=bugtraq&m=140482916501310&w=2http://marc.info/?l=bugtraq&m=140491231331543&w=2http://marc.info/?l=bugtraq&m=140499864129699&w=2http://marc.info/?l=bugtraq&m=140544599631400&w=2http://marc.info/?l=bugtraq&m=140604261522465&w=2http://marc.info/?l=bugtraq&m=140621259019789&w=2http://marc.info/?l=bugtraq&m=140672208601650&w=2http://marc.info/?l=bugtraq&m=140752315422991&w=2http://marc.info/?l=bugtraq&m=140784085708882&w=2http://marc.info/?l=bugtraq&m=140794476212181&w=2http://marc.info/?l=bugtraq&m=140852757108392&w=2http://marc.info/?l=bugtraq&m=140852826008699&w=2http://marc.info/?l=bugtraq&m=140870499402361&w=2http://marc.info/?l=bugtraq&m=140904544427729&w=2http://marc.info/?l=bugtraq&m=140983229106599&w=2http://marc.info/?l=bugtraq&m=141025641601169&w=2http://marc.info/?l=bugtraq&m=141147110427269&w=2http://marc.info/?l=bugtraq&m=141164638606214&w=2http://marc.info/?l=bugtraq&m=141383410222440&w=2http://marc.info/?l=bugtraq&m=141383465822787&w=2http://marc.info/?l=bugtraq&m=141658880509699&w=2http://marc.info/?l=bugtraq&m=142350350616251&w=2http://marc.info/?l=bugtraq&m=142546741516006&w=2http://marc.info/?l=bugtraq&m=142805027510172&w=2http://puppetlabs.com/security/cve/cve-2014-0224http://rhn.redhat.com/errata/RHSA-2014-0624.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0626.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0627.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0630.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0631.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0632.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0633.htmlhttp://rhn.redhat.com/errata/RHSA-2014-0680.htmlhttp://seclists.org/fulldisclosure/2014/Dec/23http://seclists.org/fulldisclosure/2014/Jun/38http://secunia.com/advisories/58128http://secunia.com/advisories/58337http://secunia.com/advisories/58385http://secunia.com/advisories/58433http://secunia.com/advisories/58492http://secunia.com/advisories/58579http://secunia.com/advisories/58615http://secunia.com/advisories/58639http://secunia.com/advisories/58660http://secunia.com/advisories/58667http://secunia.com/advisories/58713http://secunia.com/advisories/58714http://secunia.com/advisories/58716http://secunia.com/advisories/58719http://secunia.com/advisories/58742http://secunia.com/advisories/58743http://secunia.com/advisories/58745http://secunia.com/advisories/58759http://secunia.com/advisories/58930http://secunia.com/advisories/58939http://secunia.com/advisories/58945http://secunia.com/advisories/58977http://secunia.com/advisories/59004http://secunia.com/advisories/59012http://secunia.com/advisories/59040http://secunia.com/advisories/59043http://secunia.com/advisories/59055http://secunia.com/advisories/59063http://secunia.com/advisories/59093http://secunia.com/advisories/59101http://secunia.com/advisories/59120http://secunia.com/advisories/59126http://secunia.com/advisories/59132http://secunia.com/advisories/59135http://secunia.com/advisories/59142http://secunia.com/advisories/59162http://secunia.com/advisories/59163http://secunia.com/advisories/59167http://secunia.com/advisories/59175http://secunia.com/advisories/59186http://secunia.com/advisories/59188http://secunia.com/advisories/59189http://secunia.com/advisories/59190
+ 506 more references
2014-06-05
Published
Exploited in the wild