CVE-2014-0221

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2014-0221
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2014-06-05 21:55:00 UTC
Updated2023-11-07 02:18:00 UTC
DescriptionThe dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

Risk And Classification

Problem Types: NVD-CWE-noinfo

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Fedoraproject Fedora All All All All
Operating System Fedoraproject Fedora 19 All All All
Operating System Fedoraproject Fedora 20 All All All
Operating System Fedoraproject Fedora All All All All
Application Mariadb Mariadb All All All All
Application Openssl Openssl All All All All
Application Openssl Openssl 0.9.8 All All All
Application Openssl Openssl 0.9.8a All All All
Application Openssl Openssl 0.9.8b All All All
Application Openssl Openssl 0.9.8c All All All
Application Openssl Openssl 0.9.8d All All All
Application Openssl Openssl 0.9.8e All All All
Application Openssl Openssl 0.9.8f All All All
Application Openssl Openssl 0.9.8g All All All
Application Openssl Openssl 0.9.8h All All All
Application Openssl Openssl 0.9.8i All All All
Application Openssl Openssl 0.9.8j All All All
Application Openssl Openssl 0.9.8k All All All
Application Openssl Openssl 0.9.8l All All All
Application Openssl Openssl 0.9.8m All All All
Application Openssl Openssl 0.9.8m beta1 All All
Application Openssl Openssl 0.9.8n All All All
Application Openssl Openssl 0.9.8o All All All
Application Openssl Openssl 0.9.8p All All All
Application Openssl Openssl 0.9.8q All All All
Application Openssl Openssl 0.9.8r All All All
Application Openssl Openssl 0.9.8s All All All
Application Openssl Openssl 0.9.8t All All All
Application Openssl Openssl 0.9.8u All All All
Application Openssl Openssl 0.9.8v All All All
Application Openssl Openssl 0.9.8w All All All
Application Openssl Openssl 0.9.8x All All All
Application Openssl Openssl 1.0.0 All All All
Application Openssl Openssl 1.0.0 beta1 All All
Application Openssl Openssl 1.0.0 beta2 All All
Application Openssl Openssl 1.0.0 beta3 All All
Application Openssl Openssl 1.0.0 beta4 All All
Application Openssl Openssl 1.0.0 beta5 All All
Application Openssl Openssl 1.0.0a All All All
Application Openssl Openssl 1.0.0b All All All
Application Openssl Openssl 1.0.0c All All All
Application Openssl Openssl 1.0.0d All All All
Application Openssl Openssl 1.0.0e All All All
Application Openssl Openssl 1.0.0f All All All
Application Openssl Openssl 1.0.0g All All All
Application Openssl Openssl 1.0.0h All All All
Application Openssl Openssl 1.0.0i All All All
Application Openssl Openssl 1.0.0j All All All
Application Openssl Openssl 1.0.0k All All All
Application Openssl Openssl 1.0.0l All All All
Application Openssl Openssl 1.0.1 All All All
Application Openssl Openssl 1.0.1 beta1 All All
Application Openssl Openssl 1.0.1 beta2 All All
Application Openssl Openssl 1.0.1 beta3 All All
Application Openssl Openssl 1.0.1a All All All
Application Openssl Openssl 1.0.1b All All All
Application Openssl Openssl 1.0.1c All All All
Application Openssl Openssl 1.0.1d All All All
Application Openssl Openssl 1.0.1e All All All
Application Openssl Openssl 1.0.1f All All All
Application Openssl Openssl 1.0.1g All All All
Application Openssl Openssl All All All All
Application Openssl Openssl 0.9.8 All All All
Application Openssl Openssl 0.9.8a All All All
Application Openssl Openssl 0.9.8b All All All
Application Openssl Openssl 0.9.8c All All All
Application Openssl Openssl 0.9.8d All All All
Application Openssl Openssl 0.9.8e All All All
Application Openssl Openssl 0.9.8f All All All
Application Openssl Openssl 0.9.8g All All All
Application Openssl Openssl 0.9.8h All All All
Application Openssl Openssl 0.9.8i All All All
Application Openssl Openssl 0.9.8j All All All
Application Openssl Openssl 0.9.8k All All All
Application Openssl Openssl 0.9.8l All All All
Application Openssl Openssl 0.9.8m All All All
Application Openssl Openssl 0.9.8m beta1 All All
Application Openssl Openssl 0.9.8n All All All
Application Openssl Openssl 0.9.8o All All All
Application Openssl Openssl 0.9.8p All All All
Application Openssl Openssl 0.9.8q All All All
Application Openssl Openssl 0.9.8r All All All
Application Openssl Openssl 0.9.8s All All All
Application Openssl Openssl 0.9.8t All All All
Application Openssl Openssl 0.9.8u All All All
Application Openssl Openssl 0.9.8v All All All
Application Openssl Openssl 0.9.8w All All All
Application Openssl Openssl 0.9.8x All All All
Application Openssl Openssl 1.0.0 All All All
Application Openssl Openssl 1.0.0 beta1 All All
Application Openssl Openssl 1.0.0 beta2 All All
Application Openssl Openssl 1.0.0 beta3 All All
Application Openssl Openssl 1.0.0 beta4 All All
Application Openssl Openssl 1.0.0 beta5 All All
Application Openssl Openssl 1.0.0a All All All
Application Openssl Openssl 1.0.0b All All All
Application Openssl Openssl 1.0.0c All All All
Application Openssl Openssl 1.0.0d All All All
Application Openssl Openssl 1.0.0e All All All
Application Openssl Openssl 1.0.0f All All All
Application Openssl Openssl 1.0.0g All All All
Application Openssl Openssl 1.0.0h All All All
Application Openssl Openssl 1.0.0i All All All
Application Openssl Openssl 1.0.0j All All All
Application Openssl Openssl 1.0.0k All All All
Application Openssl Openssl 1.0.0l All All All
Application Openssl Openssl 1.0.1 All All All
Application Openssl Openssl 1.0.1 beta1 All All
Application Openssl Openssl 1.0.1 beta2 All All
Application Openssl Openssl 1.0.1 beta3 All All
Application Openssl Openssl 1.0.1a All All All
Application Openssl Openssl 1.0.1b All All All
Application Openssl Openssl 1.0.1c All All All
Application Openssl Openssl 1.0.1d All All All
Application Openssl Openssl 1.0.1e All All All
Application Openssl Openssl 1.0.1f All All All
Application Openssl Openssl 1.0.1g All All All
Operating System Opensuse Leap 42.1 All All All
Operating System Opensuse Opensuse 13.2 All All All
Operating System Redhat Enterprise Linux 5 All All All
Operating System Redhat Enterprise Linux 6.0 All All All
Operating System Redhat Enterprise Linux 5 All All All
Operating System Redhat Enterprise Linux 6.0 All All All
Application Redhat Storage 2.1 All All All
Application Redhat Storage 2.1 All All All
Operating System Suse Linux Enterprise Desktop 12 - All All
Operating System Suse Linux Enterprise Server 12 - All All
Operating System Suse Linux Enterprise Software Development Kit 12 - All All
Operating System Suse Linux Enterprise Workstation Extension 12 - All All

References

ReferenceSourceLinkTags
git.openssl.org Git - openssl.git/commit git.openssl.org
kb.bluecoat.com/index CONFIRM kb.bluecoat.com
'[security bulletin] HPSBGN03050 rev.1 - HP IceWall SSO Dfw and HP IceWall MCRP running OpenSSL, Remo' - MARC HP marc.info
Security Advisory SA60687 - Red Hat update for openssl - Secunia SECUNIA secunia.com
Security Advisory SA59301 - HP Version Control Repository Manager (VCRM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58977 - IBM BladeCenter Advanced Management Module Firmware OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59162 - McAfee Multiple Products OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Red Hat Customer Portal REDHAT rhn.redhat.com
IBM Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States CONFIRM www-01.ibm.com
Security Advisory SA59027 - IBM Lotus Foundations Start OpenSSL DTLS Infinite Recursion Denial of Service Vulnerability - Secunia SECUNIA secunia.com
Security Advisory SA58945 - IBM FastSetup OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Support | OpenSSL Security Advisory (05 June 2014) and Open Enterprise Server 2 SP3. CONFIRM www.novell.com
OpenSSL DTLS CVE-2014-0221 Remote Denial of Service Vulnerability BID www.securityfocus.com
Security Advisory SA59167 - Cisco Intrusion Prevention System (IPS) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Se curity Bulletin: Tivoli Workload Scheduler is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
OpenSSL DTLS Processing Bugs Let Remote Users Deny Service and Execute Arbitrary Code - SecurityTracker SECTRACK www.securitytracker.com
IBM notice: The page you requested cannot be displayed CONFIRM www.ibm.com
About Secunia Research | Flexera SECUNIA secunia.com
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc CONFIRM aix.software.ibm.com
Security Advisory SA59342 - HP Smart Update Manager (HP SUM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
About the security content of OS X Mavericks v10.9.5 and Security Update 2014-004 - Apple Support CONFIRM support.apple.com
IBM notice: The page you requested cannot be displayed CONFIRM www.ibm.com
Security Advisory SA59451 - IBM Tivoli Composite Application Manager for Transactions OpenSSL Security Issue and Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59514 - HP System Management Homepage OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
FortiGuard.com | Multiple Vulnerabilities in OpenSSL CONFIRM www.fortiguard.com
Security Advisory SA59192 - Cisco TelePresence Server OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Initiate Master Data Service, IBM InfoSphere Master Data Management are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and CVE-2014-0076) - United States CONFIRM www-01.ibm.com
Security Advisory SA59454 - Cisco Unity Connection OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Citrix Security Advisory for OpenSSL Vulnerabilities (June 2014) CONFIRM support.citrix.com
Security Advisory SA59655 - IBM SmartCloud Provisioning for IBM Provided Software Virtual Appliance OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19 FEDORA lists.fedoraproject.org
Security Advisory SA59287 - IBM Proventia Network Enterprise Scanner OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM InfoSphere Guardium Database Activity Monitor is affected by CVE-2014-0221, CVE-2014-0224, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
VMSA-2014-0012 | United States CONFIRM www.vmware.com
Support | OpenSSL Security Advisory (05 June 2014) and Open Enterprise Server 11 SP1. CONFIRM www.novell.com
Security Advisory SA59437 - IBM Rational Application Developer for WebSphere Software OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning. - United States CONFIRM www-01.ibm.com
www.mandriva.com MANDRIVA www.mandriva.com
Security Advisory SA59666 - IBM SDK for Node.js OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59175 - HP OpenVMS update for SSL - Secunia SECUNIA secunia.com
Security Advisory SA58713 - IBM Multiple Products OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Security Proventia Network Enterprise Scanner is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
Security Advisory SA59450 - IBM API Management OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
Security Advisory SA59120 - IBM Hardware Management Console (HMC) OpenSSL Security Issue and Two Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM i is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198 and CVE-2014-3470 - United States CONFIRM www-01.ibm.com
www.mandriva.com MANDRIVA www.mandriva.com
Security Bulletin: Rational Application Developer is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 CONFIRM www.ibm.com
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.3.0.1 Interim Fix 29 README Tivoli Composite Application Manager for Transactions 7.3.0.1 7.3.0.1-TIV-CAMIS-IF0029 Readme - United States CONFIRM www-01.ibm.com
Security Advisory SA59449 - IBM Security Network Intrusion Prevention System OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
McAfee KnowledgeBase - McAfee Security Bulletin – Seven OpenSSL vulnerabilities patched in McAfee products CONFIRM kc.mcafee.com
Security Advisory SA58615 - IBM Tivoli Netcool System Service Monitors Multiple Security Issues and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03057 rev.1 - HP Version Control Agent (HP VCA) running OpenSSL on Linux a' - MARC HP marc.info
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd CONFIRM www14.software.ibm.com
'[security bulletin] HPSBMU03056 rev.1 - HP Version Control Repository Manager (HP VCRM) running Open' - MARC HP marc.info
'[security bulletin] HPSBMU03062 rev.1 - HP Insight Control server deployment on Linux and Windows ru' - MARC HP marc.info
Security Advisory SA59528 - BlackBerry Enterprise Service Universal Device Service Component OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM - My notifications CONFIRM www14.software.ibm.com
Oracle Critical Patch Update - January 2015 CONFIRM www.oracle.com
IBM Security Bulletin: IBM Security Network Intrusion Prevention System is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and CVE-2014-3470. - United States CONFIRM www-01.ibm.com
Security Advisory SA60571 - EMC Documentum Content Server Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59669 - IBM InfoSphere Guardium OpenSSL Security Issue and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Full Disclosure: NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities FULLDISC seclists.org
Security Advisory SA59413 - IBM Initiate Master Data Service / IBM InfoSphere Master Data Management OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03074 rev.1 - HP Insight Control server migration on Linux and Windows run' - MARC HP marc.info
Security Advisory SA59300 - IBM Tivoli Management Framework OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
[security-announce] SUSE-SU-2015:0743-1: important: Security update for SUSE lists.opensuse.org
Security Advisory SA59365 - Cisco MDS 9000 / Nexus 7000 OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59441 - IBM Tivoli Network Manager IP Edition OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59518 - IBM Tivoli Workload Scheduler for Applications OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Document Display | HPE Support Center CONFIRM h20566.www2.hpe.com
'[security bulletin] HPSBMU03055 rev.1 - HP Smart Update Manager (HP SUM) running OpenSSL, Remote Den' - MARC HP marc.info
IBM Support CONFIRM www-947.ibm.com
Security Advisory SA59990 - Cisco Quantum Policy Suite OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03069 rev.1 - HP Software Operation Orchestration, OpenSSL Vulnerability, ' - MARC HP marc.info
Security Advisory SA59495 - Novell Open Enterprise Server OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59659 - IBM Tivoli Workload Scheduler Distributed OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
www.novell.com/support/kb/doc.php CONFIRM www.novell.com
Security Advisory SA59490 - HP Version Control Agent OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58337 - IBM Upward Integration Modules (UIM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM® SDK for Node.js™ is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
Support / Security / Advisories / / MDVSA-2015:062 | Mandriva MANDRIVA www.mandriva.com
'[security bulletin] HPSBMU03065 rev.1 - HP Operations Analytics, OpenSSL Vulnerability, SSL/TLS, Rem' - MARC HP marc.info
Security Advisory SA59784 - Novell File Reporter Multiple OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59721 - IBM SmartCloud Provisioning OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products - Huawei PSIRT CONFIRM www.huawei.com
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.4 Interim Fix 13 README Tivoli Composite Application Manager for Transactions 7.4.0.0 7.4.0.0-TIV-CAMIS-IF0013 Readme - United States CONFIRM www-01.ibm.com
About Secunia Research | Flexera SECUNIA secunia.com
'[security bulletin] HPSBOV03047 rev.1 - HP OpenVMS running OpenSSL, Remote Denial of Service (DoS), ' - MARC HP marc.info
IBM Support CONFIRM www-947.ibm.com
Security Advisory SA59460 - Cisco Wireless LAN Controller (WLC) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products CISCO tools.cisco.com
Security Advisory SA59429 - Cisco IOS OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBUX03046 SSRT101590 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (' - MARC HP marc.info
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
www.openssl.org/news/secadv_20140605.txt CONFIRM www.openssl.org Vendor Advisory
Gentoo Linux Documentation -- OpenSSL: Multiple vulnerabilities GENTOO security.gentoo.org
Oracle Critical Patch Update - October 2014 CONFIRM www.oracle.com
Oracle Critical Patch Update - July 2014 CONFIRM www.oracle.com
Juniper Networks - 2014-06 Out of Cycle Security Bulletin: Vulnerabilities in OpenSSL related to ChangeCipherSpec, DTLS, SSL_MODE_RELEASE_BUFFERS and ECDH ciphersuites - Knowledge Base CONFIRM kb.juniper.net
[security-announce] openSUSE-SU-2016:0640-1: important: Security update SUSE lists.opensuse.org
'[security bulletin] HPSBMU03076 rev.2 - HP Systems Insight Manager (SIM) on Linux and Windows runnin' - MARC HP marc.info
'[security bulletin] HPSBMU03051 rev.2 - HP System Management Homepage running OpenSSL on Linux and W' - MARC HP marc.info
Security Advisory SA59310 - Novell Messenger OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: SmartCloud Orchestrator is affected by the following OpenSSL vulnerabilities (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470, CVE-2014-0076) - United States CONFIRM www-01.ibm.com
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
IBM SDK for Node.js 1.1.0.4 for use by the Cordova tools CONFIRM www.ibm.com
Security Advisory SA59126 - Huawei Multiple Products Multiple OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: Tivoli Management Framework is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and possibly CVE-2014-0076. - United States CONFIRM www-01.ibm.com
Security Advisory SA59189 - Blue Coat IntelligenceCenter OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59284 - Cisco Prime Network OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Support CONFIRM www-947.ibm.com
SecurityFocus BUGTRAQ www.securityfocus.com
www.blackberry.com/btsc/KB36051 CONFIRM www.blackberry.com
Security Advisory SA61254 - IBM InfoSphere Guardium Database Activity Monitor Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59491 - BlackBerry OS OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20 FEDORA lists.fedoraproject.org
Security Advisory SA58939 - IBM SmartCloud Orchestrator OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59221 - Oracle Linux update for openssl - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Tivoli Network Manager IP Edition V39 Fix Pack 4 HTTPS support for Perl Collector install is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States CONFIRM www-01.ibm.com
Oracle Critical Patch Update - October 2017 CONFIRM www.oracle.com
IBM Support CONFIRM www-947.ibm.com
VMSA-2014-0006.11 | United States CONFIRM www.vmware.com
Bug 1103593 – CVE-2014-0221 openssl: DoS when sending invalid DTLS handshake CONFIRM bugzilla.redhat.com
Security Advisory SA59364 - HP-UX update for OpenSSL - Secunia SECUNIA secunia.com
linux.oracle.com | ELSA-2014-1053 - openssl security update CONFIRM linux.oracle.com
git.openssl.org Git - openssl.git/commit CONFIRM git.openssl.org
Security Advisory SA59306 - IBM i OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 390226 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2021-0011)
  • 390284 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2023-0013)
  • 590349 Rockwell Automation Stratix 5900 Multiple Vulnerabilities (ICSA-17-094-04)
  • 591311 Bosch Rexroth PRA-ES8P2S Ethernet-Switch Multiple Vulnerabilities (BOSCH-SA-247053-BT)
  • 671109 EulerOS Security Update for Open Secure Sockets Layer098e (OpenSSL098e) (EulerOS-SA-2019-2509)
  • 672328 EulerOS Security Update for Open Secure Sockets Layer098e (OpenSSL098e) (EulerOS-SA-2022-2717)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report