NVD

Id
31746  
Name
CVE-2014-3569  
Description
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-24  
Modified Date
2017-01-02  
Seq
2014-3569  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167064 31746 CVE-2014-3569 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679  View
167065 31746 CVE-2014-3569 APPLE-SA-2015-04-08-2  View
167066 31746 CVE-2014-3569 openSUSE-SU-2015:0130  View
167067 31746 CVE-2014-3569 SUSE-SU-2015:0946  View
167068 31746 CVE-2014-3569 openSUSE-SU-2016:0640  View
167069 31746 CVE-2014-3569 HPSBUX03162  View
167070 31746 CVE-2014-3569 SSRT101885  View
167071 31746 CVE-2014-3569 HPSBHF03289  View
167072 31746 CVE-2014-3569 HPSBOV03318  View
167073 31746 CVE-2014-3569 HPSBMU03380  View
167074 31746 CVE-2014-3569 HPSBMU03409  View
167075 31746 CVE-2014-3569 HPSBMU03396  View
167076 31746 CVE-2014-3569 HPSBMU03413  View
167077 31746 CVE-2014-3569 HPSBMU03397  View
167078 31746 CVE-2014-3569 http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3569.html  View
167079 31746 CVE-2014-3569 http://rt.openssl.org/Ticket/Display.html?id=3571&user=guest&pass=guest  View
167080 31746 CVE-2014-3569 20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products  View
167081 31746 CVE-2014-3569 DSA-3125  View
167082 31746 CVE-2014-3569 MDVSA-2015:019  View
167083 31746 CVE-2014-3569 MDVSA-2015:062  View
167084 31746 CVE-2014-3569 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
167085 31746 CVE-2014-3569 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
167086 31746 CVE-2014-3569 http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html  View
167087 31746 CVE-2014-3569 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
167088 31746 CVE-2014-3569 http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
167089 31746 CVE-2014-3569 71934  View
167090 31746 CVE-2014-3569 1033378  View
167091 31746 CVE-2014-3569 https://bto.bluecoat.com/security-advisory/sa88  View
167092 31746 CVE-2014-3569 https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=392fa7a952e97d82eac6958c81ed1e256e6b8ca5  View
167093 31746 CVE-2014-3569 https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=6ce9687b5aba5391fc0de50e18779eb676d0e04d  View
167094 31746 CVE-2014-3569 https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=b82924741b4bd590da890619be671f4635e46c2b  View
167095 31746 CVE-2014-3569 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888  View
167096 31746 CVE-2014-3569 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380  View
167097 31746 CVE-2014-3569 https://kc.mcafee.com/corporate/index?page=content&id=SB10102  View
167098 31746 CVE-2014-3569 https://kc.mcafee.com/corporate/index?page=content&id=SB10108  View
167099 31746 CVE-2014-3569 https://security-tracker.debian.org/tracker/CVE-2014-3569  View
167100 31746 CVE-2014-3569 https://support.apple.com/HT204659  View
167101 31746 CVE-2014-3569 https://www.openssl.org/news/secadv_20150108.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18514 JVNDB-2014-007389 OpenSSL の s23_srvr.c の ssl23_get_client_hello 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の s23_srvr.c の ssl23_get_client_hello 関数は、サポートされていないプロトコルを使用するという試行を適切に処理しないため、サービス運用妨害 (NULL ポインタデリファレンスおよびデーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3569 70857 CVE-2014-3569 31746 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007389.html 2014-10-27 2016-10-07 View