OpenSSL: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2014-0198 EPSS 40%

  The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does no…

  openssl openssl Debian Ubuntu
  May 6, 2014

Revision history

1. 2023-02-27 #36

   Neue Updates von IBM aufgenommen

2. 2022-04-10 #35

   Neue Updates von Oracle Linux aufgenommen

3. 2021-03-31 #34

   Neue Updates von Oracle Linux aufgenommen

4. 2019-08-18 #33

   Neue Updates von Oracle Linux aufgenommen

5. 2018-07-16 #32

   Added references

6. 2015-03-29 #31

   New remediations available

7. 2014-07-23 #27

   New remediations available

8. 2014-07-23 #28

   Version nicht vorhanden

9. 2014-07-23 #29

   New remediations available

10. 2014-07-23 #30

    Version nicht vorhanden

11. 2014-07-06 #25

    New remediations available

12. 2014-07-06 #26

    Version nicht vorhanden

13. 2014-06-29 #23

    New remediations available

14. 2014-06-29 #24

    Version nicht vorhanden

15. 2014-06-19 #21

    New remediations available

16. 2014-06-19 #22

    Version nicht vorhanden

17. 2014-06-15 #18

    New remediations available

18. 2014-06-15 #19

    Version nicht vorhanden

19. 2014-06-15 #20

    Version nicht vorhanden

20. 2014-06-11 #12

    New remediations available

21. 2014-06-11 #13

    Version nicht vorhanden

22. 2014-06-11 #14

    New remediations available

23. 2014-06-11 #15

    Version nicht vorhanden

24. 2014-06-11 #16

    New remediations available

25. 2014-06-11 #17

    Version nicht vorhanden

References

• IBM Security Bulletin 690129 vom 2023-02-28
  https://www.ibm.com/support/pages/node/690129
• National Vulnerability Database CVE-2014-0198 vom 2014-05-06
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0198
• OpenBSD 5.5 Release "errata & patch list" vom 2014-05-06
  http://www.openbsd.org/errata55.html#005_openssl
• Debian Security Advisory DSA-2931-1 vom 2014-05-18
  https://www.debian.org/security/2014/dsa-2931
• FreeBSD Security Advisory FreeBSD-SA-14:10.openssl vom 2014-05-13
  http://security.freebsd.org/advisories/FreeBSD-SA-14:10.openssl.asc
• Red Hat Security Advisory RHSA-2014:0679-1
  https://rhn.redhat.com/errata/RHSA-2014-0679.html
• VMware Security Advisory VMSA-2014-0006
  http://www.vmware.com/security/advisories/VMSA-2014-0006.html
• Juniper Security Advisory JSA10629
  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629
• NetBSD Security Advisory 2014-006
  http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2014-006.txt.asc
• IBM AIX Security Advisory
  http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc
• McAfee Security Bulletin SB10075
  https://kc.mcafee.com/corporate/index?page=content&id=SB10075
• F5 Security Advisory sol15329
  http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15329.html?ref=rss
• IBM Security Bulletin 1676419 vom 2014-06-17
  http://www-01.ibm.com/support/docview.wss?uid=swg21676419
• HP Security Bulletin HPSBMU03056 rev. 1
  https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04349789
• Oracle Third Party Vulnerability Resolution Blog vom 2014-06-23
  https://blogs.oracle.com/sunsecurity/entry/cve_2014_0198_buffer_errors
• HP SECURITY BULLETIN c04379485 vom 2014-07-23
  https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04379485
• HP SECURITY BULLETIN c04378799 vom 2014-07-23
  https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04378799
• Mandriva Security Advisory MDVSA-2015:062 vom 2015-03-27
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A062/
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16
  http://linux.oracle.com/errata/ELSA-2019-4747.html
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html