cbcvebase.
CVE-2014-0224
published 2014-06-05

CVE-2014-0224: OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows…

PriorityP184high7.4CVSS 3.1
AVNACHPRNUINSUCHIHAN
ITWEXPLOITVulnCheck KEVInitial access
Exploited in the wild
EPSS
95.33%
99.9th percentile
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
ciscoproducts
debianopenssl< openssl 1.0.1h-1 (bookworm)openssl 1.0.1h-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
filezilla-projectfilezilla_server< 0.9.450.9.45
mariadbmariadb>= 10.0.0 < 10.0.1310.0.13
nodejsnode.js< 0.10.290.10.29
opensslopenssl< 0.9.8za0.9.8za
opensslopenssl>= 0 < 1.0.1h-11.0.1h-1
opensslopenssl>= 0 < 1.0.1h-11.0.1h-1
opensslopenssl>= 0 < 1.0.1h-11.0.1h-1
opensslopenssl>= 0 < 1.0.1h-11.0.1h-1
opensslopenssl>= 0 < 1.0.1f-1ubuntu2.31.0.1f-1ubuntu2.3
opensslopenssl>= 0 < 1.0.1f-1ubuntu2.41.0.1f-1ubuntu2.4
opensslopenssl>= 0 < 1.0.1f-1ubuntu2.21.0.1f-1ubuntu2.2
opensslopenssl>= 1.0.0 < 1.0.0m1.0.0m
opensslopenssl>= 1.0.1 < 1.0.1h1.0.1h
opensuseopensuse
opensuseopensuse
paloaltocortex_xdr
paloaltopan-os
pythonpython>= 2.7.0 < 2.7.82.7.8
pythonpython>= 3.4.0 < 3.4.23.4.2
redhatenterprise_linux
redhatenterprise_linux

Detection & IOCsextracted from sources · hover to see the quote

otherNessus Plugin 74326
otherPVS Plugin 8253
urlhttps://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_ccs.rb
  • Detect early/unexpected ChangeCipherSpec (CCS) messages sent during TLS session negotiation before key material is established — this is the core exploit primitive for CVE-2014-0224.
  • Both the client and server must be running vulnerable OpenSSL for the attack to succeed; focus detection on OpenSSL-to-OpenSSL TLS sessions where a zero-length master key may be negotiated.
  • Use Metasploit auxiliary module auxiliary/scanner/ssl/openssl_ccs to actively probe servers for acceptance of premature CCS messages.
  • Flag TLS handshakes where a ChangeCipherSpec message is received before the Finished message / key exchange is complete, indicating a potential CCS injection attempt.
  • Use passive network monitoring (e.g., Nessus Network Monitor / PVS) to identify hosts advertising vulnerable OpenSSL versions (< 0.9.8za, < 1.0.0m, < 1.0.1h) in TLS banners.
  • ·Desktop browsers (IE, Chrome, Firefox, Safari) are NOT vulnerable as they do not use OpenSSL; Chrome for Android does use OpenSSL and was vulnerable — scope detection to OpenSSL-based TLS endpoints.
  • ·Only devices terminating SSL/TLS connections (acting as SSL/DTLS server or client) are affected; devices merely passing through SSL/DTLS traffic without terminating it are not affected.

CVSS provenance

nvdv3.17.4HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv7.4HIGH
vulncheck7.4HIGH
vendor_cisco10.0CRITICAL
vendor_debian7.4HIGH
vendor_redhat7.4HIGH
vendor_ubuntu6.8MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.