Skip to content
OpenAdvisories
Unscored DLA-33-1 5 CVEs

openssl - security update

Published Aug 7, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 openssl 0.9.8o-4squeeze17

Vulnerabilities 5

  • Unscored —
    CVE-2014-3505 EPSS 46%

    Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n,…

  • Unscored —
    CVE-2014-3506 EPSS 46%

    d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allo…

  • Unscored —
    CVE-2014-3507 Public exploit EPSS 55%

    Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 bef…

  • Unscored —
    CVE-2014-3508 EPSS 25%

    The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 be…

  • Unscored —
    CVE-2014-3510 EPSS 18%

    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1…