Cloudanix VulnDB

CVE-2014-0198

None

CVSS

—

EPSS

40.3%

Published

May 6, 2014

CISA due date

—

The record

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 openssl 0 1.0.1g-4
Debian:12 openssl 0 1.0.1g-4
Debian:13 openssl 0 1.0.1g-4
Debian:7 openssl 0 1.0.1e-2+deb7u9
Mageia:3 openssl 0 1.0.1e-1.8.mga3
Mageia:4 openssl 0 1.0.1e-8.5.mga4
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::workstation openssl-debuginfo 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::workstation openssl-devel 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::workstation openssl-perl 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:6::workstation openssl-static 0 0:1.0.1e-16.el6_5.14
Red Hat:enterprise_linux:7::client openssl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::client openssl-debuginfo 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::client openssl-devel 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::client openssl-libs 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::client openssl-perl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::client openssl-static 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::computenode openssl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::computenode openssl-debuginfo 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::computenode openssl-devel 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::computenode openssl-libs 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::computenode openssl-perl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::computenode openssl-static 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::server openssl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::server openssl-debuginfo 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::server openssl-devel 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::server openssl-libs 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::server openssl-perl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::server openssl-static 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::workstation openssl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::workstation openssl-debuginfo 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::workstation openssl-devel 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::workstation openssl-libs 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::workstation openssl-perl 0 1:1.0.1e-34.el7_0.3
Red Hat:enterprise_linux:7::workstation openssl-static 0 1:1.0.1e-34.el7_0.3
Red Hat:storage:2.1:server:el6 openssl 0 0:1.0.1e-16.el6_5.14
Red Hat:storage:2.1:server:el6 openssl-debuginfo 0 0:1.0.1e-16.el6_5.14
Red Hat:storage:2.1:server:el6 openssl-devel 0 0:1.0.1e-16.el6_5.14
Red Hat:storage:2.1:server:el6 openssl-perl 0 0:1.0.1e-16.el6_5.14
Red Hat:storage:2.1:server:el6 openssl-static 0 0:1.0.1e-16.el6_5.14
SUSE:Linux Enterprise Desktop 12 mariadb 0 10.0.16-15.1
SUSE:Linux Enterprise Server 12 mariadb 0 10.0.16-15.1
SUSE:Linux Enterprise Server for SAP Applications 12 mariadb 0 10.0.16-15.1
SUSE:Linux Enterprise Software Development Kit 12 mariadb 0 10.0.16-15.1
SUSE:Linux Enterprise Workstation Extension 12 mariadb 0 10.0.16-15.1
Ubuntu:14.04:LTS openssl 0 1.0.1f-1ubuntu2.1
openSUSE:Tumbleweed openssl-1_1 0 1.1.1l-1.2

Related vulnerabilities