Unscored DLA-0003-1 5 CVEs

openssl - security update

Published Jun 5, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	openssl	0.9.8o-4squeeze15

Vulnerabilities 5

Unscored —

CVE-2014-0076

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a cons…

openssl Debian

Mar 25, 2014
Unscored —

CVE-2014-0195 Public exploit EPSS 100%

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.…

openssl openssl openssl098 Debian Ubuntu

Jun 5, 2014
Unscored —

CVE-2014-0221 Public exploit EPSS 88%

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1…

openssl openssl openssl098 Debian Ubuntu

Jun 5, 2014
Unscored —

CVE-2014-0224 Public exploit EPSS 95%

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCip…

openssl openssl openssl098 Debian Ubuntu

Jun 5, 2014
Unscored —

CVE-2014-3470 EPSS 86%

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 befor…

openssl openssl Debian Ubuntu

Jun 5, 2014