Skip to content
OpenAdvisories
Unscored RHSA-2014:1052 7 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::client openssl-debuginfo 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::client openssl-devel 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::client openssl-perl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::client openssl-static 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-debuginfo 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-devel 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-perl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-static 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::server openssl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::server openssl-debuginfo 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::server openssl-devel 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::server openssl-perl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::server openssl-static 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-debuginfo 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-devel 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-perl 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-static 0:1.0.1e-16.el6_5.15
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.1e-34.el7_0.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.1e-34.el7_0.4

Vulnerabilities 7

  • Unscored —
    CVE-2014-3505 EPSS 46%

    Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n,…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3506 EPSS 46%

    d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allo…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3507 Public exploit EPSS 55%

    Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 bef…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3508 EPSS 25%

    The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 be…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3509 EPSS 13%

    Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3510 EPSS 18%

    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3511 EPSS 14%

    The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to …

    openssl openssl Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://www.openssl.org/news/secadv_20140806.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127490
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127498
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127499
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127502
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127503
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127504
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1052.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3505
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3505
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3505
  • report
    https://access.redhat.com/security/cve/CVE-2014-3506
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3506
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3506
  • report
    https://access.redhat.com/security/cve/CVE-2014-3507
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3507
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3507
  • report
    https://access.redhat.com/security/cve/CVE-2014-3508
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3508
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3508
  • report
    https://access.redhat.com/security/cve/CVE-2014-3509
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3509
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3509
  • report
    https://access.redhat.com/security/cve/CVE-2014-3510
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3510
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3510
  • report
    https://access.redhat.com/security/cve/CVE-2014-3511
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3511
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3511