NVD

Id
31697  
Name
CVE-2014-3512  
Description
Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-08-13  
Modified Date
2017-01-06  
Seq
2014-3512  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
166450 31697 CVE-2014-3512 NetBSD-SA2014-008  View
166451 31697 CVE-2014-3512 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc  View
166452 31697 CVE-2014-3512 openSUSE-SU-2014:1052  View
166453 31697 CVE-2014-3512 SSRT101846  View
166454 31697 CVE-2014-3512 59700  View
166455 31697 CVE-2014-3512 59710  View
166456 31697 CVE-2014-3512 60022  View
166457 31697 CVE-2014-3512 60221  View
166458 31697 CVE-2014-3512 60493  View
166459 31697 CVE-2014-3512 60803  View
166460 31697 CVE-2014-3512 61017  View
166461 31697 CVE-2014-3512 61100  View
166462 31697 CVE-2014-3512 61171  View
166463 31697 CVE-2014-3512 61184  View
166464 31697 CVE-2014-3512 GLSA-201412-39  View
166465 31697 CVE-2014-3512 http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15565.html  View
166466 31697 CVE-2014-3512 http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240  View
166467 31697 CVE-2014-3512 http://www-01.ibm.com/support/docview.wss?uid=swg21682293  View
166468 31697 CVE-2014-3512 http://www-01.ibm.com/support/docview.wss?uid=swg21683389  View
166469 31697 CVE-2014-3512 http://www-01.ibm.com/support/docview.wss?uid=swg21686997  View
166470 31697 CVE-2014-3512 DSA-2998  View
166471 31697 CVE-2014-3512 http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm  View
166472 31697 CVE-2014-3512 69083  View
166473 31697 CVE-2014-3512 1030693  View
166474 31697 CVE-2014-3512 http://www.tenable.com/security/tns-2014-06  View
166475 31697 CVE-2014-3512 openssl-cve20143512-dos(95158)  View
166476 31697 CVE-2014-3512 https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=4a23b12a031860253b58d503f296377ca076427b  View
166477 31697 CVE-2014-3512 [syslog-ng-announce] 20140910 syslog-ng Premium Edition 5 LTS (5.0.6a) has been released  View
166478 31697 CVE-2014-3512 FreeBSD-SA-14:18  View
166479 31697 CVE-2014-3512 https://www.openssl.org/news/secadv_20140806.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14942 JVNDB-2014-003817 OpenSSL の SRP の実装の crypto/srp/srp_lib.c におけるバッファオーバーフローの脆弱性 OpenSSL の SRP の実装の crypto/srp/srp_lib.c には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-3512 70800 CVE-2014-3512 31697 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003817.html 2014-08-06 2015-06-15 View