CVE-2014-0195

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2014-0195
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2014-06-05 21:55:00 UTC
Updated2023-11-07 02:18:00 UTC
DescriptionThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.

Risk And Classification

Problem Types: CWE-120

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Fedoraproject Fedora All All All All
Operating System Fedoraproject Fedora 19 All All All
Operating System Fedoraproject Fedora 20 All All All
Operating System Fedoraproject Fedora All All All All
Application Mariadb Mariadb All All All All
Application Openssl Openssl All All All All
Application Openssl Openssl 0.9.8 All All All
Application Openssl Openssl 0.9.8a All All All
Application Openssl Openssl 0.9.8b All All All
Application Openssl Openssl 0.9.8c All All All
Application Openssl Openssl 0.9.8d All All All
Application Openssl Openssl 0.9.8e All All All
Application Openssl Openssl 0.9.8f All All All
Application Openssl Openssl 0.9.8g All All All
Application Openssl Openssl 0.9.8h All All All
Application Openssl Openssl 0.9.8i All All All
Application Openssl Openssl 0.9.8j All All All
Application Openssl Openssl 0.9.8k All All All
Application Openssl Openssl 0.9.8l All All All
Application Openssl Openssl 0.9.8m All All All
Application Openssl Openssl 0.9.8m beta1 All All
Application Openssl Openssl 0.9.8n All All All
Application Openssl Openssl 0.9.8o All All All
Application Openssl Openssl 0.9.8p All All All
Application Openssl Openssl 0.9.8q All All All
Application Openssl Openssl 0.9.8r All All All
Application Openssl Openssl 0.9.8s All All All
Application Openssl Openssl 0.9.8t All All All
Application Openssl Openssl 0.9.8u All All All
Application Openssl Openssl 0.9.8v All All All
Application Openssl Openssl 0.9.8w All All All
Application Openssl Openssl 0.9.8x All All All
Application Openssl Openssl 1.0.0 All All All
Application Openssl Openssl 1.0.0 beta1 All All
Application Openssl Openssl 1.0.0 beta2 All All
Application Openssl Openssl 1.0.0 beta3 All All
Application Openssl Openssl 1.0.0 beta4 All All
Application Openssl Openssl 1.0.0 beta5 All All
Application Openssl Openssl 1.0.0a All All All
Application Openssl Openssl 1.0.0b All All All
Application Openssl Openssl 1.0.0c All All All
Application Openssl Openssl 1.0.0d All All All
Application Openssl Openssl 1.0.0e All All All
Application Openssl Openssl 1.0.0f All All All
Application Openssl Openssl 1.0.0g All All All
Application Openssl Openssl 1.0.0h All All All
Application Openssl Openssl 1.0.0i All All All
Application Openssl Openssl 1.0.0j All All All
Application Openssl Openssl 1.0.0k All All All
Application Openssl Openssl 1.0.0l All All All
Application Openssl Openssl 1.0.1 All All All
Application Openssl Openssl 1.0.1 beta1 All All
Application Openssl Openssl 1.0.1 beta2 All All
Application Openssl Openssl 1.0.1 beta3 All All
Application Openssl Openssl 1.0.1a All All All
Application Openssl Openssl 1.0.1b All All All
Application Openssl Openssl 1.0.1c All All All
Application Openssl Openssl 1.0.1d All All All
Application Openssl Openssl 1.0.1e All All All
Application Openssl Openssl 1.0.1f All All All
Application Openssl Openssl 1.0.1g All All All
Application Openssl Openssl All All All All
Application Openssl Openssl 0.9.8 All All All
Application Openssl Openssl 0.9.8a All All All
Application Openssl Openssl 0.9.8b All All All
Application Openssl Openssl 0.9.8c All All All
Application Openssl Openssl 0.9.8d All All All
Application Openssl Openssl 0.9.8e All All All
Application Openssl Openssl 0.9.8f All All All
Application Openssl Openssl 0.9.8g All All All
Application Openssl Openssl 0.9.8h All All All
Application Openssl Openssl 0.9.8i All All All
Application Openssl Openssl 0.9.8j All All All
Application Openssl Openssl 0.9.8k All All All
Application Openssl Openssl 0.9.8l All All All
Application Openssl Openssl 0.9.8m All All All
Application Openssl Openssl 0.9.8m beta1 All All
Application Openssl Openssl 0.9.8n All All All
Application Openssl Openssl 0.9.8o All All All
Application Openssl Openssl 0.9.8p All All All
Application Openssl Openssl 0.9.8q All All All
Application Openssl Openssl 0.9.8r All All All
Application Openssl Openssl 0.9.8s All All All
Application Openssl Openssl 0.9.8t All All All
Application Openssl Openssl 0.9.8u All All All
Application Openssl Openssl 0.9.8v All All All
Application Openssl Openssl 0.9.8w All All All
Application Openssl Openssl 0.9.8x All All All
Application Openssl Openssl 1.0.0 All All All
Application Openssl Openssl 1.0.0 beta1 All All
Application Openssl Openssl 1.0.0 beta2 All All
Application Openssl Openssl 1.0.0 beta3 All All
Application Openssl Openssl 1.0.0 beta4 All All
Application Openssl Openssl 1.0.0 beta5 All All
Application Openssl Openssl 1.0.0a All All All
Application Openssl Openssl 1.0.0b All All All
Application Openssl Openssl 1.0.0c All All All
Application Openssl Openssl 1.0.0d All All All
Application Openssl Openssl 1.0.0e All All All
Application Openssl Openssl 1.0.0f All All All
Application Openssl Openssl 1.0.0g All All All
Application Openssl Openssl 1.0.0h All All All
Application Openssl Openssl 1.0.0i All All All
Application Openssl Openssl 1.0.0j All All All
Application Openssl Openssl 1.0.0k All All All
Application Openssl Openssl 1.0.0l All All All
Application Openssl Openssl 1.0.1 All All All
Application Openssl Openssl 1.0.1 beta1 All All
Application Openssl Openssl 1.0.1 beta2 All All
Application Openssl Openssl 1.0.1 beta3 All All
Application Openssl Openssl 1.0.1a All All All
Application Openssl Openssl 1.0.1b All All All
Application Openssl Openssl 1.0.1c All All All
Application Openssl Openssl 1.0.1d All All All
Application Openssl Openssl 1.0.1e All All All
Application Openssl Openssl 1.0.1f All All All
Application Openssl Openssl 1.0.1g All All All
Operating System Opensuse Leap 42.1 All All All
Operating System Opensuse Opensuse 13.2 All All All
Operating System Redhat Enterprise Linux 6.0 All All All
Operating System Redhat Enterprise Linux 6.0 All All All
Application Redhat Storage 2.1 All All All
Application Redhat Storage 2.1 All All All

References

ReferenceSourceLinkTags
Security Advisory SA59530 - BlackBerry Link OpenSSL Two Vulnerabilities - Secunia SECUNIA secunia.com
kb.bluecoat.com/index CONFIRM kb.bluecoat.com
Security Advisory SA59040 - Cisco AnyConnect VPN Client OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBHF03293 rev.1 - HP Virtual Connect 8Gb 24-Port FC Module running OpenSSL and' - MARC HP marc.info
'[security bulletin] HPSBGN03050 rev.1 - HP IceWall SSO Dfw and HP IceWall MCRP running OpenSSL, Remo' - MARC HP marc.info
Security Advisory SA59223 - F-Secure E-mail and Server Security / Server Security OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59301 - HP Version Control Repository Manager (VCRM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58977 - IBM BladeCenter Advanced Management Module Firmware OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
ZDI-14-173/CVE-2014-0195 - OpenSSL DTLS Fragment O... - HP Enterprise Business Community MISC h30499.www3.hp.com
Security Advisory SA59162 - McAfee Multiple Products OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States CONFIRM www-01.ibm.com
Security Advisory SA58945 - IBM FastSetup OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Se curity Bulletin: Tivoli Workload Scheduler is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
OpenSSL DTLS Processing Bugs Let Remote Users Deny Service and Execute Arbitrary Code - SecurityTracker SECTRACK www.securitytracker.com
IBM notice: The page you requested cannot be displayed CONFIRM www.ibm.com
About Secunia Research | Flexera SECUNIA secunia.com
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc CONFIRM aix.software.ibm.com
Security Advisory SA59342 - HP Smart Update Manager (HP SUM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
About the security content of OS X Mavericks v10.9.5 and Security Update 2014-004 - Apple Support CONFIRM support.apple.com
Security Advisory SA59451 - IBM Tivoli Composite Application Manager for Transactions OpenSSL Security Issue and Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59514 - HP System Management Homepage OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
FortiGuard.com | Multiple Vulnerabilities in OpenSSL CONFIRM www.fortiguard.com
Security Advisory SA59192 - Cisco TelePresence Server OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Initiate Master Data Service, IBM InfoSphere Master Data Management are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and CVE-2014-0076) - United States CONFIRM www-01.ibm.com
Security Advisory SA59454 - Cisco Unity Connection OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Citrix Security Advisory for OpenSSL Vulnerabilities (June 2014) CONFIRM support.citrix.com
Security Advisory SA59655 - IBM SmartCloud Provisioning for IBM Provided Software Virtual Appliance OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58660 - Cisco Multiple Products OpenSSL SSL/TLS Handshake and Buffer Overflow Vulnerabilities - Secunia SECUNIA secunia.com
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19 FEDORA lists.fedoraproject.org
Security Advisory SA58743 - Fortinet FortiOS (FortiGate) OpenSSL Two Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59287 - IBM Proventia Network Enterprise Scanner OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM InfoSphere Guardium Database Activity Monitor is affected by CVE-2014-0221, CVE-2014-0224, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
VMSA-2014-0012 | United States CONFIRM www.vmware.com
Security Advisory SA59437 - IBM Rational Application Developer for WebSphere Software OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning. - United States CONFIRM www-01.ibm.com
Security Advisory SA59666 - IBM SDK for Node.js OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59175 - HP OpenVMS update for SSL - Secunia SECUNIA secunia.com
Security Advisory SA58713 - IBM Multiple Products OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Security Proventia Network Enterprise Scanner is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
Security Advisory SA59450 - IBM API Management OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
IBM Security Bulletin: IBM i is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198 and CVE-2014-3470 - United States CONFIRM www-01.ibm.com
www.mandriva.com MANDRIVA www.mandriva.com
Security Bulletin: Rational Application Developer is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 CONFIRM www.ibm.com
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.3.0.1 Interim Fix 29 README Tivoli Composite Application Manager for Transactions 7.3.0.1 7.3.0.1-TIV-CAMIS-IF0029 Readme - United States CONFIRM www-01.ibm.com
Security Advisory SA59449 - IBM Security Network Intrusion Prevention System OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
McAfee KnowledgeBase - McAfee Security Bulletin – Seven OpenSSL vulnerabilities patched in McAfee products CONFIRM kc.mcafee.com
git.openssl.org Git - openssl.git/commit CONFIRM git.openssl.org Patch
Security Advisory SA59305 - IBM MessageSight Server OpenSSL SSL/TLS Handshake and Buffer Overflow Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58615 - IBM Tivoli Netcool System Service Monitors Multiple Security Issues and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03057 rev.1 - HP Version Control Agent (HP VCA) running OpenSSL on Linux a' - MARC HP marc.info
'[security bulletin] HPSBMU03056 rev.1 - HP Version Control Repository Manager (HP VCRM) running Open' - MARC HP marc.info
'[security bulletin] HPSBMU03062 rev.1 - HP Insight Control server deployment on Linux and Windows ru' - MARC HP marc.info
Security Advisory SA59528 - BlackBerry Enterprise Service Universal Device Service Component OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
git.openssl.org Git - openssl.git/commit git.openssl.org
Oracle Critical Patch Update - January 2015 CONFIRM www.oracle.com
IBM Security Bulletin: IBM Security Network Intrusion Prevention System is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and CVE-2014-3470. - United States CONFIRM www-01.ibm.com
Security Advisory SA59587 - F5 Multiple Products OpenSSL "dtls1_reassemble_fragment()" Buffer Overflow Vulnerability - Secunia SECUNIA secunia.com
Security Advisory SA60571 - EMC Documentum Content Server Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59669 - IBM InfoSphere Guardium OpenSSL Security Issue and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Full Disclosure: NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities FULLDISC seclists.org
Security Advisory SA59413 - IBM Initiate Master Data Service / IBM InfoSphere Master Data Management OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03074 rev.1 - HP Insight Control server migration on Linux and Windows run' - MARC HP marc.info
Security Advisory SA59300 - IBM Tivoli Management Framework OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
[security-announce] SUSE-SU-2015:0743-1: important: Security update for SUSE lists.opensuse.org
Security Advisory SA59365 - Cisco MDS 9000 / Nexus 7000 OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59441 - IBM Tivoli Network Manager IP Edition OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59518 - IBM Tivoli Workload Scheduler for Applications OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Document Display | HPE Support Center CONFIRM h20566.www2.hpe.com
'[security bulletin] HPSBMU03055 rev.1 - HP Smart Update Manager (HP SUM) running OpenSSL, Remote Den' - MARC HP marc.info
SOL15356 - OpenSSL vulnerability CVE-2014-0195 CONFIRM support.f5.com
IBM Support CONFIRM www-947.ibm.com
Security Advisory SA59990 - Cisco Quantum Policy Suite OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03069 rev.1 - HP Software Operation Orchestration, OpenSSL Vulnerability, ' - MARC HP marc.info
Security Advisory SA59659 - IBM Tivoli Workload Scheduler Distributed OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
www.novell.com/support/kb/doc.php CONFIRM www.novell.com
Security Advisory SA59490 - HP Version Control Agent OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58337 - IBM Upward Integration Modules (UIM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM® SDK for Node.js™ is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
Support / Security / Advisories / / MDVSA-2015:062 | Mandriva MANDRIVA www.mandriva.com
'[security bulletin] HPSBMU03065 rev.1 - HP Operations Analytics, OpenSSL Vulnerability, SSL/TLS, Rem' - MARC HP marc.info
Security Advisory SA59784 - Novell File Reporter Multiple OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59721 - IBM SmartCloud Provisioning OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products - Huawei PSIRT CONFIRM www.huawei.com
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.4 Interim Fix 13 README Tivoli Composite Application Manager for Transactions 7.4.0.0 7.4.0.0-TIV-CAMIS-IF0013 Readme - United States CONFIRM www-01.ibm.com
About Secunia Research | Flexera SECUNIA secunia.com
'[security bulletin] HPSBOV03047 rev.1 - HP OpenVMS running OpenSSL, Remote Denial of Service (DoS), ' - MARC HP marc.info
IBM Support CONFIRM www-947.ibm.com
Security Advisory SA59188 - Blue Coat Multiple Products OpenSSL Two Vulnerabilities - Secunia SECUNIA secunia.com
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products CISCO tools.cisco.com
Security Advisory SA59429 - Cisco IOS OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBUX03046 SSRT101590 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (' - MARC HP marc.info
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
www.openssl.org/news/secadv_20140605.txt CONFIRM www.openssl.org Vendor Advisory
Gentoo Linux Documentation -- OpenSSL: Multiple vulnerabilities GENTOO security.gentoo.org
OpenSSL CVE-2014-0195 Memory Corruption Vulnerability BID www.securityfocus.com
Oracle Critical Patch Update - October 2014 CONFIRM www.oracle.com
Oracle Critical Patch Update - July 2014 CONFIRM www.oracle.com
IBM Security Bulletin: IBM MessageSight is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, and CVE-2014-0195) - United States CONFIRM www-01.ibm.com
Juniper Networks - 2014-06 Out of Cycle Security Bulletin: Vulnerabilities in OpenSSL related to ChangeCipherSpec, DTLS, SSL_MODE_RELEASE_BUFFERS and ECDH ciphersuites - Knowledge Base CONFIRM kb.juniper.net
[security-announce] openSUSE-SU-2016:0640-1: important: Security update SUSE lists.opensuse.org
'[security bulletin] HPSBMU03076 rev.2 - HP Systems Insight Manager (SIM) on Linux and Windows runnin' - MARC HP marc.info
'[security bulletin] HPSBMU03051 rev.2 - HP System Management Homepage running OpenSSL on Linux and W' - MARC HP marc.info
Security Advisory SA59310 - Novell Messenger OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: SmartCloud Orchestrator is affected by the following OpenSSL vulnerabilities (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470, CVE-2014-0076) - United States CONFIRM www-01.ibm.com
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
IBM SDK for Node.js 1.1.0.4 for use by the Cordova tools CONFIRM www.ibm.com
Security Advisory SA59126 - Huawei Multiple Products Multiple OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: Tivoli Management Framework is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and possibly CVE-2014-0076. - United States CONFIRM www-01.ibm.com
Security Advisory SA59189 - Blue Coat IntelligenceCenter OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Support CONFIRM www-947.ibm.com
SecurityFocus BUGTRAQ www.securityfocus.com
Bug 1103598 – CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment CONFIRM bugzilla.redhat.com
Security Advisory SA58883 - F5 Multiple Products OpenSSL "dtls1_reassemble_fragment()" Buffer Overflow Vulnerability - Secunia SECUNIA secunia.com
www.blackberry.com/btsc/KB36051 CONFIRM www.blackberry.com
Security Advisory SA61254 - IBM InfoSphere Guardium Database Activity Monitor Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59491 - BlackBerry OS OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
fsc-2014-6 | F-Secure Labs CONFIRM www.f-secure.com
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20 FEDORA lists.fedoraproject.org
Security Advisory SA58939 - IBM SmartCloud Orchestrator OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Tivoli Network Manager IP Edition V39 Fix Pack 4 HTTPS support for Perl Collector install is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States CONFIRM www-01.ibm.com
Oracle Critical Patch Update - October 2017 CONFIRM www.oracle.com
IBM Support CONFIRM www-947.ibm.com
VMSA-2014-0006.11 | United States CONFIRM www.vmware.com
Security Advisory SA59364 - HP-UX update for OpenSSL - Secunia SECUNIA secunia.com
Once Bled, Twice Shy (OpenSSL: CVE-2014-0195) - HP Enterprise Business Community MISC h30499.www3.hp.com
Security Advisory SA59306 - IBM i OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 390226 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2021-0011)
  • 390284 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2023-0013)
  • 590349 Rockwell Automation Stratix 5900 Multiple Vulnerabilities (ICSA-17-094-04)
  • 591311 Bosch Rexroth PRA-ES8P2S Ethernet-Switch Multiple Vulnerabilities (BOSCH-SA-247053-BT)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report