Skip to content
OpenAdvisories
Unscored RHSA-2014:1692 2 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Gluster Storage 2 storage:2.1:server:el6 openssl 0:1.0.1e-30.el6_6.2
Red Hat · Gluster Storage 2 storage:2.1:server:el6 openssl-debuginfo 0:1.0.1e-30.el6_6.2
Red Hat · Gluster Storage 2 storage:2.1:server:el6 openssl-devel 0:1.0.1e-30.el6_6.2
Red Hat · Gluster Storage 2 storage:2.1:server:el6 openssl-perl 0:1.0.1e-30.el6_6.2
Red Hat · Gluster Storage 2 storage:2.1:server:el6 openssl-static 0:1.0.1e-30.el6_6.2

Vulnerabilities 2

  • Unscored —
    CVE-2014-3513 EPSS 37%

    Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a d…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3567 EPSS 23%

    Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 be…

    openssl openssl Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/articles/1232123
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152789
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152953
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1152961
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1692.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3513
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3513
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3513
  • article
    https://www.openssl.org/news/secadv_20141015.txt
  • report
    https://access.redhat.com/security/cve/CVE-2014-3567
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3567
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3567