Skip to content
OpenAdvisories
Unscored DLA-81-1 3 CVEs

openssl - security update

Published Nov 1, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 openssl 0.9.8o-4squeeze18

Vulnerabilities 3

  • Unscored —
    CVE-2014-3567 EPSS 23%

    Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 be…

  • Unscored —
    CVE-2014-3568 EPSS 14%

    OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option…

  • Unscored —
    CVE-2014-3569 EPSS 20%

    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attem…