Skip to content
OpenAdvisories
Unscored RHSA-2014:1053 5 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client openssl 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::client openssl-debuginfo 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::client openssl-perl 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl-debuginfo 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl-devel 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::server openssl 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::server openssl-debuginfo 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::server openssl-devel 0:0.9.8e-27.el5_10.4
Red Hat · RHEL 5 enterprise_linux:5::server openssl-perl 0:0.9.8e-27.el5_10.4

Vulnerabilities 5

  • Unscored —
    CVE-2014-0221 Public exploit EPSS 88%

    The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1…

    openssl openssl openssl098 Debian Ubuntu
  • Unscored —
    CVE-2014-3505 EPSS 46%

    Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n,…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3506 EPSS 46%

    d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allo…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3508 EPSS 25%

    The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 be…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3510 EPSS 18%

    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1…

    openssl openssl Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://www.openssl.org/news/secadv_20140605.txt
  • article
    https://www.openssl.org/news/secadv_20140806.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1103593
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127490
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127499
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127500
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1127503
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1053.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0221
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0221
  • report
    https://access.redhat.com/security/cve/CVE-2014-3505
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3505
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3505
  • report
    https://access.redhat.com/security/cve/CVE-2014-3506
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3506
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3506
  • report
    https://access.redhat.com/security/cve/CVE-2014-3508
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3508
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3508
  • report
    https://access.redhat.com/security/cve/CVE-2014-3510
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3510
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3510