NVD

Id
31695  
Name
CVE-2014-3510  
Description
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-08-13  
Modified Date
2017-01-06  
Seq
2014-3510  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
166354 31695 CVE-2014-3510 NetBSD-SA2014-008  View
166355 31695 CVE-2014-3510 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc  View
166356 31695 CVE-2014-3510 http://linux.oracle.com/errata/ELSA-2014-1052.html  View
166357 31695 CVE-2014-3510 http://linux.oracle.com/errata/ELSA-2014-1053.html  View
166358 31695 CVE-2014-3510 FEDORA-2014-9301  View
166359 31695 CVE-2014-3510 FEDORA-2014-9308  View
166360 31695 CVE-2014-3510 openSUSE-SU-2016:0640  View
166361 31695 CVE-2014-3510 openSUSE-SU-2014:1052  View
166362 31695 CVE-2014-3510 HPSBUX03095  View
166363 31695 CVE-2014-3510 HPSBOV03099  View
166364 31695 CVE-2014-3510 SSRT101846  View
166365 31695 CVE-2014-3510 RHSA-2014:1256  View
166366 31695 CVE-2014-3510 RHSA-2014:1297  View
166367 31695 CVE-2014-3510 58962  View
166368 31695 CVE-2014-3510 59700  View
166369 31695 CVE-2014-3510 59710  View
166370 31695 CVE-2014-3510 59743  View
166371 31695 CVE-2014-3510 60022  View
166372 31695 CVE-2014-3510 60221  View
166373 31695 CVE-2014-3510 60493  View
166374 31695 CVE-2014-3510 60684  View
166375 31695 CVE-2014-3510 60778  View
166376 31695 CVE-2014-3510 60803  View
166377 31695 CVE-2014-3510 61017  View
166378 31695 CVE-2014-3510 61045  View
166379 31695 CVE-2014-3510 61100  View
166380 31695 CVE-2014-3510 61184  View
166381 31695 CVE-2014-3510 61250  View
166382 31695 CVE-2014-3510 GLSA-201412-39  View
166383 31695 CVE-2014-3510 http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15568.html  View
166384 31695 CVE-2014-3510 http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240  View
166385 31695 CVE-2014-3510 http://www-01.ibm.com/support/docview.wss?uid=swg21682293  View
166386 31695 CVE-2014-3510 http://www-01.ibm.com/support/docview.wss?uid=swg21683389  View
166387 31695 CVE-2014-3510 http://www-01.ibm.com/support/docview.wss?uid=swg21686997  View
166388 31695 CVE-2014-3510 DSA-2998  View
166389 31695 CVE-2014-3510 http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm  View
166390 31695 CVE-2014-3510 MDVSA-2014:158  View
166391 31695 CVE-2014-3510 69082  View
166392 31695 CVE-2014-3510 1030693  View
166393 31695 CVE-2014-3510 openssl-cve20143510-dos(95164)  View
166394 31695 CVE-2014-3510 https://bugzilla.redhat.com/show_bug.cgi?id=1127503  View
166395 31695 CVE-2014-3510 https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=17160033765480453be0a41335fa6b833691c049  View
166396 31695 CVE-2014-3510 [syslog-ng-announce] 20140910 syslog-ng Premium Edition 5 LTS (5.0.6a) has been released  View
166397 31695 CVE-2014-3510 FreeBSD-SA-14:18  View
166398 31695 CVE-2014-3510 https://www.openssl.org/news/secadv_20140806.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14940 JVNDB-2014-003815 OpenSSL の s3_clnt.c 内の ssl3_send_client_key_exchange 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の s3_clnt.c 内の ssl3_send_client_key_exchange 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよびクライアントアプリケーションのクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3510 70798 CVE-2014-3510 31695 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003815.html 2014-08-06 2015-06-15 View