CVE-2014-3470
published 2014-06-05CVE-2014-3470: The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher…
PriorityP339medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
85.78%
99.7th percentile
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | products | — | — |
| debian | openssl | < openssl 1.0.1h-1 (bookworm) | openssl 1.0.1h-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| mariadb | mariadb | >= 10.0.0 < 10.0.13 | 10.0.13 |
| openssl | openssl | < 0.9.8za | 0.9.8za |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1h-1 | 1.0.1h-1 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.3 | 1.0.1f-1ubuntu2.3 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.4 | 1.0.1f-1ubuntu2.4 |
| openssl | openssl | >= 0 < 1.0.1f-1ubuntu2.2 | 1.0.1f-1ubuntu2.2 |
| openssl | openssl | >= 1.0.0 < 1.0.0m | 1.0.0m |
| openssl | openssl | >= 1.0.1 < 1.0.1h | 1.0.1h |
| opensuse | leap | — | — |
| opensuse | opensuse | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | storage | — | — |
| suse | linux_enterprise_desktop | — | — |
| suse | linux_enterprise_server | — | — |
| suse | linux_enterprise_software_development_kit | — | — |
| suse | linux_enterprise_workstation_extension | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerability is triggered when an anonymous ECDH cipher suite is used during TLS handshake; detect TLS ClientKeyExchange messages using anonymous ECDH cipher suites (e.g., AECDH-* cipher suite negotiation) as a potential attack vector ↗
- →The vulnerable code path is in the function ssl3_send_client_key_exchange within s3_clnt.c in OpenSSL; binary/process-level detection should look for vulnerable OpenSSL versions (before 0.9.8za, before 1.0.0m, before 1.0.1h) executing this code path ↗
- →Affected Ubuntu releases include 12.04 LTS, 13.10, and 14.04 LTS; scope detection/patching efforts to these platforms ↗
- →Debian fix was introduced in OpenSSL package version 1.0.1h-1; systems running earlier package versions are vulnerable and should be flagged ↗
- ·The vulnerability only manifests when an anonymous ECDH (AECDH) cipher suite is negotiated; deployments that do not enable anonymous ECDH cipher suites are not affected ↗
- ·Impact is client-side only (client crash/DoS); the server is not directly affected — detection and mitigation should focus on client-side OpenSSL usage ↗
- ·Debian scopes this vulnerability as 'local' in its tracker, which may affect prioritization in some environments ↗
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.8MEDIUM
vendor_cisco10.0CRITICAL
vendor_ubuntu6.8MEDIUM
vendor_debian4.3MEDIUM
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rq9h-37gr-2m9p: The ssl3_send_client_key_exchange function in s3_clnt
ghsa_unreviewed·2022-05-14
CVE-2014-3470 [MEDIUM] CWE-476 GHSA-rq9h-37gr-2m9p: The ssl3_send_client_key_exchange function in s3_clnt
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
OSV
openssl regression
osv·2014-06-23·CVSS 6.8
CVE-2014-0224 [MEDIUM] openssl regression
openssl regression
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
renegotiation, such as PostgreSQL. This update fixes the problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL incorrectly h
OSV
openssl regression
osv·2014-06-12·CVSS 6.8
CVE-2014-0224 [MEDIUM] openssl regression
openssl regression
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
tls_session_secret_cb, such as wpa_supplicant. This update fixes the
problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL i
OSV
CVE-2014-3470: The ssl3_send_client_key_exchange function in s3_clnt
osv·2014-06-05·CVSS 4.3
CVE-2014-3470 [MEDIUM] CVE-2014-3470: The ssl3_send_client_key_exchange function in s3_clnt
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
OSV
openssl vulnerabilities
osv·2014-06-05·CVSS 6.8
CVE-2014-0195 [MEDIUM] openssl vulnerabilities
openssl vulnerabilities
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL incorrectly handled certain
handshakes. A remote attacker could use this flaw to perform a
machine-in-the-middle attack and possibly decrypt and modify traffic.
(CVE-2014-0224)
Felix Gröbert and Ivan Fratrić discovered that OpenSSL inco
CISA ICS
Rockwell Automation Stratix 5900
cisa_ics·2017-05-10
Rockwell Automation Stratix 5900
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Rockwell Automation Stratix 5900
Last RevisedMay 10, 2017
Alert CodeICSA-17-094-04
## CVSS v3 10.0
ATTENTION: Remotely exploitable/low skill level to exploit.
Vendor: Rockwell Automation
Equipment: Stratix 5900
Vulnerabilities: Improper Input Validation, Resource Management Errors, Improper Authentication, Path Traversal.
## REPOSTED INFORMATION
This advisory was originally posted to the NCCIC Portal on April 4, 2017, and is being released to the NCCIC/ICS-CERT web site.
## AFFECTED PRODUCTS
Rockwell Automation reports that these vulnerabilities affect the following Strat
CISA ICS
Siemens OpenSSL Vulnerabilities (Update G)
cisa_ics·2014-10-16
Siemens OpenSSL Vulnerabilities (Update G)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens OpenSSL Vulnerabilities (Update G)
Last RevisedAugust 29, 2018
Alert CodeICSA-14-198-03G
## OVERVIEW
This updated advisory is a follow-up to the updated advisory titled ICSA-14-198-03F Siemens OpenSSL Vulnerabilities that was published October 16, 2014, on the NCCIC/ICS-CERT web site.
## --------- Begin Update G Part 1 of 3 --------
Siemens has identified four vulnerabilities in its OpenSSL cryptographic software library affecting several Siemens industrial products. Updates are available for APE 2.0.2, S7-1500, WinCC OA (PVSS), CP1543-1, Ruggedcom ROX 1, and ROX 2-bas
Ubuntu
OpenSSL regression
vendor_ubuntu·2014-08-18·CVSS 6.8
[MEDIUM] OpenSSL regression
Title: OpenSSL regression
Summary: USN-2232-1 introduced a regression in OpenSSL.
USN-2232-1 fixed vulnerabilities in OpenSSL. One of the patch backports for
Ubuntu 10.04 LTS caused a regression for certain applications. This update
fixes the problem.
We apologize for the inconvenience.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service.
Ubuntu
OpenSSL regression
vendor_ubuntu·2014-06-23·CVSS 6.8
CVE-2014-0224 [MEDIUM] OpenSSL regression
Title: OpenSSL regression
Summary: USN-2232-1 introduced a regression in OpenSSL.
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
renegotiation, such as PostgreSQL. This update fixes the problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2
Ubuntu
OpenSSL regression
vendor_ubuntu·2014-06-12·CVSS 6.8
CVE-2014-0224 [MEDIUM] OpenSSL regression
Title: OpenSSL regression
Summary: USN-2232-1 introduced a regression in OpenSSL.
USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for
CVE-2014-0224 caused a regression for certain applications that use
tls_session_secret_cb, such as wpa_supplicant. This update fixes the
problem.
Original advisory details:
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of ser
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2014-06-05·CVSS 6.8
CVE-2014-0195 [MEDIUM] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS
fragments. A remote attacker could use this issue to cause OpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and
Ubuntu 14.04 LTS. (CVE-2014-0195)
Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A
remote attacker could use this issue to cause OpenSSL to crash, resulting
in a denial of service. (CVE-2014-0221)
KIKUCHI Masashi discovered that OpenSSL incorrectly handled certain
handshakes. A remote attacker could use this flaw to perform a
machine-in-the-middle attack and possibly decrypt and modify traffic.
(CVE-2014-02
Cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
vendor_cisco·2014-06-05·CVSS 10.0
CVE-2010-5298 [CRITICAL] Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service (DoS) condition, or perform a man-in-the-middle attack. On June 5, 2014, the OpenSSL Project released a security advisory detailing seven distinct vulnerabilities. The vulnerabilities are referenced in this document as follows:
SSL/TLS Man-in-the-Middle Vulnerability
DTLS Recursion Flaw Vulnerability
DTLS Invalid Fragment Vulnerability
SSL_MODE_RELEASE_BUFFERS NULL Pointer Dereference Vulnerability
SSL_MODE_RELEASE_BUFFERS Session Injection or Denial of Service Vulnerability
Anonymous ECDH Denial of Service Vulnerab
Red Hat
openssl: client-side denial of service when using anonymous ECDH
vendor_redhat·2014-06-05·CVSS 4.3
CVE-2014-3470 [MEDIUM] CWE-476 openssl: client-side denial of service when using anonymous ECDH
openssl: client-side denial of service when using anonymous ECDH
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
Statement: This issue does not affect the version of openssl and openssl097a as shipped with Red Hat Enterprise Linux 5. This issue does not affect the openssl098e as shipped with Red Hat Enterprise Linux 6.
Package: openssl (Red Hat Enterprise Linux 5) - Not affected
Package: openssl097a (Red Hat Enterprise Linux 5) - Not affected
Package: guest-images (Red Hat Enterprise Linux 6) - Not affected
Package: openssl09
BSD
FreeBSD-SA-14:14.openssl: OpenSSL multiple vulnerabilities
bsd_advisories·2014-06-05·CVSS 6.8
CVE-2014-0195 [MEDIUM] FreeBSD-SA-14:14.openssl: OpenSSL multiple vulnerabilities
FreeBSD-SA-14:14.openssl Security Advisory
The FreeBSD Project
Topic: OpenSSL multiple vulnerabilities
Category: contrib
Module: openssl
Announced: 2014-06-05
Affects: All supported versions of FreeBSD.
Corrected: 2014-06-05 12:32:38 UTC (stable/10, 10.0-STABLE)
2014-06-05 12:33:23 UTC (releng/10.0, 10.0-RELEASE-p5)
2014-06-05 12:53:06 UTC (stable/9, 9.3-BETA1)
2014-06-05 12:53:06 UTC (stable/9, 9.3-BETA1-p2)
2014-06-05 12:33:23 UTC (releng/9.2, 9.2-RELEASE-p8)
2014-06-05 12:33:23 UTC (releng/9.1, 9.1-RELEASE-p15)
2014-06-05 12:32:38 UTC (stable/8, 8.4-STABLE)
2014-06-05 12:33:23 UTC (releng/8.4, 8.4-RELEASE-p12)
CVE Name: CVE-2014-0195, CVE-2014-0221, CVE-2014-0224, CVE-2014-3470
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above,
Debian
CVE-2014-3470: openssl - The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8z...
vendor_debian·2014·CVSS 4.3
CVE-2014-3470 [MEDIUM] CVE-2014-3470: openssl - The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8z...
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
Scope: local
bookworm: resolved (fixed in 1.0.1h-1)
bullseye: resolved (fixed in 1.0.1h-1)
forky: resolved (fixed in 1.0.1h-1)
sid: resolved (fixed in 1.0.1h-1)
trixie: resolved (fixed in 1.0.1h-1)
Cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
vendor_cisco
CVE-2014-3470 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
CVE-2014-3470: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service (DoS) condition, or perform a man-in-the-middle attack. On June 5, 2014, the OpenSSL Project released a security advisory detailing seven distinct vulnerabilities. The vulnerabilities are referenced in this document as follows: SSL/TLS Man-in-the-Middle Vulnerability DTLS Recursion Flaw Vulnerability DTLS Invalid Fragment Vulnerability SSL_MODE_RELEASE_BUFFERS NULL Pointer Dereference Vulnerability SSL_MODE_RELEASE_BUFFERS Session Injection or Denial of Service Vulnerability Anonymous ECDH Denial of Ser
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [epel-7]
bugzilla·2014-08-07·CVSS 4.0
CVE-2014-0221 [MEDIUM] CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [epel-7]
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [epel-7]
The unfixed package from Fedora was added to EPEL-7.
+++ This bug was initially created as a clone of Bug #1096234 +++
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relev
Bugzilla
CVE-2014-3470 CVE-2014-0221 CVE-2014-0224 CVE-2014-0195 mingw32-openssl: various flaws [epel-5]
bugzilla·2014-08-07·CVSS 6.8
CVE-2014-3470 [MEDIUM] CVE-2014-3470 CVE-2014-0221 CVE-2014-0224 CVE-2014-0195 mingw32-openssl: various flaws [epel-5]
CVE-2014-3470 CVE-2014-0221 CVE-2014-0224 CVE-2014-0195 mingw32-openssl: various flaws [epel-5]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-5 tracking bug for mingw32-o
Bugzilla
CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH
bugzilla·2014-06-02·CVSS 4.3
CVE-2014-3470 [MEDIUM] CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH
CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH
As per the upstream advisory:
OpenSSL TLS clients enabling anonymous ECDH ciphersuites are subject to a denial of service attack.
OpenSSL 1.0.0 users should upgrade to 1.0.0m.
OpenSSL 1.0.1 users should upgrade to 1.0.1h.
Acknowledgements:
Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Felix Gröbert and Ivan Fratrić of Google as the original reporters of this issue.
Discussion:
Created attachment 901376
Upstream patch
---
Fixed upstream in OpenSSL 1.0.1h, 1.0.0m and 0.9.8za.
External References:
https://www.openssl.org/news/secadv_20140605.txt
---
Upstream commits:
OpenSSL-1.0.1:
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8011cd56e
Bugzilla
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 openssl: various flaws [fedora-all]
bugzilla·2014-05-09·CVSS 4.0
CVE-2014-0221 [MEDIUM] CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 openssl: various flaws [fedora-all]
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 openssl: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when avai
Bugzilla
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [fedora-all]
bugzilla·2014-05-09·CVSS 4.0
CVE-2014-0221 [MEDIUM] CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [fedora-all]
CVE-2014-0221 CVE-2014-0198 CVE-2014-0224 CVE-2014-0195 CVE-2010-5298 CVE-2014-3470 mingw-openssl: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field whe
arXiv
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
arxiv_fulltext·2025-01-29
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
Fine-Grained 1-Day Vulnerability Detection in Binaries via Patch Code Localization
Chaopeng Dong
Work is done at Nanyang Technological University.
[email protected]
0009-0000-4729-7778
Beijing Key Laboratory of IOT Information Security Technology, Institute of Information Engineering, CAS; School of Cyber Security, University of Chinese Academy of Sciences
Beijing
Beijing
China
Jindong Guo
Institute of Information Engineering, CAS; School of Cyber Security, University of Chinese Academy of Sciences
Beijing
China
[email protected]
Shouguo Yang
Zhongguancun Laboratory
Beijing
China
[email protected]
Yang Xiao
Institute of Information Engineering, CAS; School of Cyber Security, University of Chinese Academy of Sciences
Beijing
China
[email protected]
Yi Li
Nanyang Te
Tenable
OpenSSL ChangeCipherSpec Dashboard
blogs_tenable·2014-06-06
OpenSSL ChangeCipherSpec Dashboard
by Steve Tilson June 6, 2014
The OpenSSL ChangeCipherSpec vulnerability is a Man-in-the-Middle attack that can allow an attacker modify the traffic between two hosts during a phase of an SSL/TLS handshake. This flaw could allow a MiTM attacker to decrypt or forge SSL messages by telling the service to begin encrypted communications before key material has been exchanged, which causes predictable keys to be used to secure future traffic. This dashboard identifies systems vulnerable to the OpenSSL ChangeCipherSpec vulnerability.
Man-in-the-Middle (MitM) vulnerabilities allow an attacker to insert themselves into a communication channel. While each of the endpoints assume they are communicating directly with each other, all the traffic is in fact flowing through the attacker. This type of h
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.aschttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlhttp://marc.info/?l=bugtraq&m=140266410314613&w=2http://marc.info/?l=bugtraq&m=140317760000786&w=2http://marc.info/?l=bugtraq&m=140389274407904&w=2http://marc.info/?l=bugtraq&m=140389355508263&w=2http://marc.info/?l=bugtraq&m=140431828824371&w=2http://marc.info/?l=bugtraq&m=140448122410568&w=2http://marc.info/?l=bugtraq&m=140482916501310&w=2http://marc.info/?l=bugtraq&m=140491231331543&w=2http://marc.info/?l=bugtraq&m=140499827729550&w=2http://marc.info/?l=bugtraq&m=140621259019789&w=2http://marc.info/?l=bugtraq&m=140752315422991&w=2http://marc.info/?l=bugtraq&m=140904544427729&w=2http://seclists.org/fulldisclosure/2014/Dec/23http://secunia.com/advisories/58337http://secunia.com/advisories/58579http://secunia.com/advisories/58615http://secunia.com/advisories/58667http://secunia.com/advisories/58713http://secunia.com/advisories/58714http://secunia.com/advisories/58716http://secunia.com/advisories/58742http://secunia.com/advisories/58797http://secunia.com/advisories/58939http://secunia.com/advisories/58945http://secunia.com/advisories/58977http://secunia.com/advisories/59120http://secunia.com/advisories/59126http://secunia.com/advisories/59162http://secunia.com/advisories/59167http://secunia.com/advisories/59175http://secunia.com/advisories/59189http://secunia.com/advisories/59191http://secunia.com/advisories/59192http://secunia.com/advisories/59223http://secunia.com/advisories/59264http://secunia.com/advisories/59282http://secunia.com/advisories/59284http://secunia.com/advisories/59287http://secunia.com/advisories/59300http://secunia.com/advisories/59301http://secunia.com/advisories/59306http://secunia.com/advisories/59310http://secunia.com/advisories/59340http://secunia.com/advisories/59342http://secunia.com/advisories/59362http://secunia.com/advisories/59364http://secunia.com/advisories/59365http://secunia.com/advisories/59413http://secunia.com/advisories/59431http://secunia.com/advisories/59437http://secunia.com/advisories/59438http://secunia.com/advisories/59440http://secunia.com/advisories/59441http://secunia.com/advisories/59442http://secunia.com/advisories/59445http://secunia.com/advisories/59449http://secunia.com/advisories/59450http://secunia.com/advisories/59451http://secunia.com/advisories/59459http://secunia.com/advisories/59460http://secunia.com/advisories/59483http://secunia.com/advisories/59490http://secunia.com/advisories/59491http://secunia.com/advisories/59495http://secunia.com/advisories/59514http://secunia.com/advisories/59518http://secunia.com/advisories/59525http://secunia.com/advisories/59655http://secunia.com/advisories/59659http://secunia.com/advisories/59666http://secunia.com/advisories/59669http://secunia.com/advisories/59721http://secunia.com/advisories/59784http://secunia.com/advisories/59895http://secunia.com/advisories/59916http://secunia.com/advisories/59990http://secunia.com/advisories/60571http://secunia.com/advisories/61254http://security.gentoo.org/glsa/glsa-201407-05.xmlhttp://support.apple.com/kb/HT6443http://support.citrix.com/article/CTX140876http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.htmlhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-opensslhttp://www-01.ibm.com/support/docview.wss?uid=isg400001841http://www-01.ibm.com/support/docview.wss?uid=isg400001843http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163http://www-01.ibm.com/support/docview.wss?uid=swg21673137http://www-01.ibm.com/support/docview.wss?uid=swg21675626http://www-01.ibm.com/support/docview.wss?uid=swg21675821http://www-01.ibm.com/support/docview.wss?uid=swg21676035http://www-01.ibm.com/support/docview.wss?uid=swg21676062http://www-01.ibm.com/support/docview.wss?uid=swg21676071
+ 200 more references
2014-06-05
Published