CVE-2014-0224

Summary

CVE	CVE-2014-0224
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2014-06-05 21:55:00 UTC
Updated	2023-11-07 02:18:00 UTC
Description	OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.

Risk And Classification

Problem Types: CWE-326

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Fedoraproject	Fedora	19	All	All	All
Operating System	Fedoraproject	Fedora	20	All	All	All
Operating System	Fedoraproject	Fedora	19	All	All	All
Operating System	Fedoraproject	Fedora	20	All	All	All
Application	Filezilla-project	Filezilla Server	All	All	All	All
Application	Filezilla-project	Filezilla Server	All	All	All	All
Application	Mariadb	Mariadb	All	All	All	All
Application	Nodejs	Node.js	All	All	All	All
Application	Openssl	Openssl	All	All	All	All
Application	Openssl	Openssl	All	All	All	All
Operating System	Opensuse	Opensuse	13.1	All	All	All
Operating System	Opensuse	Opensuse	13.2	All	All	All
Operating System	Opensuse	Opensuse	13.1	All	All	All
Operating System	Opensuse	Opensuse	13.2	All	All	All
Application	Python	Python	All	All	All	All
Operating System	Redhat	Enterprise Linux	4	All	All	All
Operating System	Redhat	Enterprise Linux	5	All	All	All
Operating System	Redhat	Enterprise Linux	6.0	All	All	All
Operating System	Redhat	Enterprise Linux	4	All	All	All
Operating System	Redhat	Enterprise Linux	5	All	All	All
Operating System	Redhat	Enterprise Linux	6.0	All	All	All
Application	Redhat	Jboss Enterprise Application Platform	5.2.0	All	All	All
Application	Redhat	Jboss Enterprise Application Platform	6.2.3	All	All	All
Application	Redhat	Jboss Enterprise Application Platform	5.2.0	All	All	All
Application	Redhat	Jboss Enterprise Application Platform	6.2.3	All	All	All
Application	Redhat	Jboss Enterprise Web Platform	5.2.0	All	All	All
Application	Redhat	Jboss Enterprise Web Platform	5.2.0	All	All	All
Application	Redhat	Jboss Enterprise Web Server	2.0.1	All	All	All
Application	Redhat	Jboss Enterprise Web Server	2.0.1	All	All	All
Application	Redhat	Storage	2.1	All	All	All
Application	Redhat	Storage	2.1	All	All	All
Hardware	Siemens	Application Processing Engine	-	All	All	All
Hardware	Siemens	Application Processing Engine	-	All	All	All
Operating System	Siemens	Application Processing Engine Firmware	All	All	All	All
Operating System	Siemens	Application Processing Engine Firmware	All	All	All	All
Hardware	Siemens	Cp1543-1	-	All	All	All
Hardware	Siemens	Cp1543-1	-	All	All	All
Operating System	Siemens	Cp1543-1 Firmware	All	All	All	All
Operating System	Siemens	Cp1543-1 Firmware	All	All	All	All
Hardware	Siemens	Rox	-	All	All	All
Hardware	Siemens	Rox	-	All	All	All
Operating System	Siemens	Rox Firmware	All	All	All	All
Operating System	Siemens	Rox Firmware	All	All	All	All
Hardware	Siemens	S7-1500	-	All	All	All
Hardware	Siemens	S7-1500	-	All	All	All
Operating System	Siemens	S7-1500 Firmware	All	All	All	All
Operating System	Siemens	S7-1500 Firmware	All	All	All	All

References

Reference	Source	Link	Tags
Security Advisory SA59214 - IBM Rational Tau OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59530 - BlackBerry Link OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM notice: The page you requested cannot be displayed	CONFIRM	www-01.ibm.com	Third Party Advisory
IBM Cognos Business Intelligence 10.2.x interim fixes address a security vulnerability - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59447 - IBM Tivoli Endpoint Manager for Remote Control OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf	CONFIRM	www.innominate.com	Third Party Advisory
OpenSSL MITM CCS injection attack (CVE-2014-0224) - Red Hat Customer Portal	CONFIRM	access.redhat.com	Third Party Advisory
kb.bluecoat.com/index	CONFIRM	kb.bluecoat.com	Third Party Advisory
Security Advisory SA59040 - Cisco AnyConnect VPN Client OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Support	CONFIRM	www-947.ibm.com	Third Party Advisory
Security Advisory SA59354 - Solaris WAN Boot OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBST03103 rev.1 - HP Storage EVA Command View Suite running OpenSSL, Remote Un' - MARC	HP	marc.info	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: OpenSSL vulnerability in IBM SAN Volume Controller and Storwize Family (CVE-2014-0224) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
'[security bulletin] HPSBGN03050 rev.1 - HP IceWall SSO Dfw and HP IceWall MCRP running OpenSSL, Remo' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59223 - F-Secure E-mail and Server Security / Server Security OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59301 - HP Version Control Repository Manager (VCRM) OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59380 - Oracle Solaris WAN Boot OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: Rational Tau is affected by OpenSSL vulnerabilities (CVE-2014-0224) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
Security Advisory SA58977 - IBM BladeCenter Advanced Management Module Firmware OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59162 - McAfee Multiple Products OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA61815 - HP StorageWorks Command View for Tape Libraries OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA58945 - IBM FastSetup OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBHF03088 rev.1 - HP Integrity SD2 CB900s i2 and i4 Servers running OpenSSL, R' - MARC	HP	marc.info	Third Party Advisory
Support \| OpenSSL Security Advisory (05 June 2014) and Open Enterprise Server 2 SP3.	CONFIRM	www.novell.com	Third Party Advisory
Juniper Networks - Junos Pulse/SA (SSLVPN): Details on fixes for SSL/TLS MITM vulnerability (CVE-2014-0224)/JSA10629 - Knowledge Base	CONFIRM	kb.juniper.net	Not Applicable
Security Advisory SA59167 - Cisco Intrusion Prevention System (IPS) OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59132 - Citrix Products OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Full Disclosure: Re: More OpenSSL issues	FULLDISC	seclists.org	Mailing List, Third Party Advisory
CVE-2014-0224 \| Puppet Labs	CONFIRM	puppetlabs.com	Third Party Advisory
Security Advisory SA59211 - F5 Multiple Products OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Se curity Bulletin: Tivoli Workload Scheduler is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html	CONFIRM	support.f5.com	Third Party Advisory
IBM Endpoint Manager for Remote Control Interim Fix 9.0.0-TIV-IEMRC900-IF0005 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59442 - IBM WebSphere MQ for HP NonStop Server OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Oracle Critical Patch Update - July 2016	CONFIRM	www.oracle.com	Patch
Security Advisory SA60049 - HP OneView OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
IBM notice: The page you requested cannot be displayed	CONFIRM	www.ibm.com	Broken Link
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc	CONFIRM	aix.software.ibm.com	Third Party Advisory
'[security bulletin] HPSBST03195 rev.1 - HP 3PAR Service Processor (SP) running OpenSSL and Bash, Rem' - MARC	HP	marc.info	Third Party Advisory
'[security bulletin] HPSBMU03216 rev.2 - HP Service Manager running SSLv3, Multiple Remote Vulnerabil' - MARC	HP	marc.info	Third Party Advisory
git.openssl.org Git - openssl.git/commit	CONFIRM	git.openssl.org	Patch, Vendor Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
Security Advisory SA59342 - HP Smart Update Manager (HP SUM) OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59448 - IBM Sterling Connect:Enterprise for UNIX OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Splunk Enterprise 6.1.2, 6.0.5 and 5.0.9 address two vulnerabilities - July 1, 2014 \| Splunk	CONFIRM	www.splunk.com	Third Party Advisory
Security Advisory SA59589 - HP Onboard Administrator OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
About the security content of OS X Mavericks v10.9.5 and Security Update 2014-004 - Apple Support	CONFIRM	support.apple.com	Third Party Advisory
[SBR] Patches for Steel-Belted Radius Enterprise and Global Enterprise for OpenSSL Vulnerability - Juniper Networks	CONFIRM	kb.juniper.net	Third Party Advisory
'[security bulletin] HPSBHF03052 rev.2 - HP Network Products running OpenSSL, Multiple Remote Vulnera' - MARC	HP	marc.info	Third Party Advisory
'[security bulletin] HPSBMU03078 rev.1 - HP CloudSystem Foundation and HP CloudSystem Enterprise Soft' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59202 - Cisco MATE Multiple Products OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59375 - Oracle Solaris OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59451 - IBM Tivoli Composite Application Manager for Transactions OpenSSL Security Issue and Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Endpoint Manager for Remote Control Interim Fix 9.1.0-TIV-IEMRC910-IF0002 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59347 - Innominate mGuard Device Manager OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
[CVE-2014-0224] CCS Injection Vulnerability and Trend Micro products	CONFIRM	esupport.trendmicro.com	Third Party Advisory
Security Advisory SA59514 - HP System Management Homepage OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
FortiGuard.com \| Multiple Vulnerabilities in OpenSSL	CONFIRM	www.fortiguard.com	Third Party Advisory
Vulnerabilities resolved in TRITON APX Version 8.0	CONFIRM	www.websense.com	Third Party Advisory
Security Advisory SA59192 - Cisco TelePresence Server OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM Initiate Master Data Service, IBM InfoSphere Master Data Management are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and CVE-2014-0076) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA58742 - IBM Rational ClearCase OpenSSL Security Issue and Vulnerability - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59370 - IBM Flex System Integrated Management Module 2 (IMM2) OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59454 - Cisco Unity Connection OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59325 - FileZilla Server OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Citrix Security Advisory for OpenSSL Vulnerabilities (June 2014)	CONFIRM	support.citrix.com	Third Party Advisory
Security Advisory SA59655 - IBM SmartCloud Provisioning for IBM Provided Software Virtual Appliance OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA58660 - Cisco Multiple Products OpenSSL SSL/TLS Handshake and Buffer Overflow Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM Security Access Manager for Mobile and IBM Security Access Manager for Web appliances are affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and possibly CVE-2014-0076 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
IBM Security Bulletin: Tivoli Endpoint Manager for Remote Control is affected by the following OpenSSL vulnerability:CVE-2014-0224 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19	FEDORA	lists.fedoraproject.org	Third Party Advisory
Security Advisory SA58743 - Fortinet FortiOS (FortiGate) OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
Vulnerability Note VU#978508 - OpenSSL is vulnerable to a man-in-the-middle attack	CERT-VN	www.kb.cert.org	Third Party Advisory, US Government Resource
Security Advisory SA59287 - IBM Proventia Network Enterprise Scanner OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03101 rev.1 - HP Asset Manager, CloudSystem Chargeback, running OpenSSL, R' - MARC	HP	marc.info	Third Party Advisory
'[security bulletin] HPSBMU03094 rev.1 - HP Connect-IT, running OpenSSL, Remote Disclosure of Informa' - MARC	HP	marc.info	Third Party Advisory
IBM Security Bulletin: IBM InfoSphere Guardium Database Activity Monitor is affected by CVE-2014-0221, CVE-2014-0224, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59368 - Oracle Solaris OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
VMSA-2014-0012 \| United States	CONFIRM	www.vmware.com	Third Party Advisory
Support \| OpenSSL Security Advisory (05 June 2014) and Open Enterprise Server 11 SP1.	CONFIRM	www.novell.com	Third Party Advisory
Security Advisory SA59437 - IBM Rational Application Developer for WebSphere Software OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning. - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59264 - Cisco WebEx Meetings Server / Unified Communications Manager OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
[security-announce] SUSE-SU-2015:0578-1: important: Security update for	SUSE	lists.opensuse.org	Third Party Advisory
'[security bulletin] HPSBST03265 rev.1 - HP VMA SAN Gateway running Bash Shell and OpenSSL, Remote De' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59827 - MySQL Workbench OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA58716 - IBM Rational ClearQuest Security Issue and Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59338 - IBM Algo One OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
www.mandriva.com	MANDRIVA	www.mandriva.com	Third Party Advisory
Security Advisory SA59666 - IBM SDK for Node.js OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59142 - IBM General Parallel File System (GPFS) OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Nessus 5.2.7 Now Available \| Tenable Discussions Forum	CONFIRM	discussions.nessus.org	Third Party Advisory
Security Advisory SA60567 - HP AssetManager / CloudSystem Chargeback OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59175 - HP OpenVMS update for SSL - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59894 - HP Cloud Service Automation OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA60819 - HP Connect-It (CIT) OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA58713 - IBM Multiple Products OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM Security Proventia Network Enterprise Scanner is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Bulletin: TS2900 is affected by the following OpenSSL vulnerabilities: CVE-2014-0224	CONFIRM	www.ibm.com	Third Party Advisory
Oracle Critical Patch Update - October 2016	CONFIRM	www.oracle.com	Patch, Third Party Advisory
Security Advisory SA59450 - IBM API Management OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM notice: The page you requested cannot be displayed	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59374 - Cisco IOS XE OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59120 - IBM Hardware Management Console (HMC) OpenSSL Security Issue and Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM Endpoint Manager for Remote Control is affected by the following OpenSSL vulnerability: CVE-2014-0224 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Solaris Lets Local Users Gain Elevated Privileges and Remote Users Access and Modify Data and Deny Service - SecurityTracker	SECTRACK	www.securitytracker.com	Third Party Advisory, VDB Entry
IBM Security Bulletin: IBM i is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198 and CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
www.mandriva.com	MANDRIVA	www.mandriva.com	Third Party Advisory
Security Bulletin: Rational Application Developer is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470	CONFIRM	www.ibm.com	Third Party Advisory
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.3.0.1 Interim Fix 29 README Tivoli Composite Application Manager for Transactions 7.3.0.1 7.3.0.1-TIV-CAMIS-IF0029 Readme - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59282 - Cisco Multiple Products OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
OpenSSL #ccsinjection Vulnerability	MISC	ccsinjection.lepidum.co.jp	Third Party Advisory
Security Advisory SA59449 - IBM Security Network Intrusion Prevention System OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
McAfee KnowledgeBase - McAfee Security Bulletin – Seven OpenSSL vulnerabilities patched in McAfee products	CONFIRM	kc.mcafee.com	Third Party Advisory
Security Advisory SA59438 - IBM Security Access Manager for Web / Security Access Manager for Mobile Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA58719 - IBM TS3400 OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59305 - IBM MessageSight Server OpenSSL SSL/TLS Handshake and Buffer Overflow Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Arista - Security Advisory 0005	MISC	www.arista.com
Security Advisory SA58615 - IBM Tivoli Netcool System Service Monitors Multiple Security Issues and Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03057 rev.1 - HP Version Control Agent (HP VCA) running OpenSSL on Linux a' - MARC	HP	marc.info	Third Party Advisory
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd	CONFIRM	www14.software.ibm.com	Third Party Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
Nessus 5.2.7 and PVS 4.0.3 Are Available for Download \| Tenable Network Security	CONFIRM	www.tenable.com	Third Party Advisory
IBM Security Bulletin: WebSphere MQ is affected by the following OpenSSL vulnerabilities: CVE-2014-0224 & CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
'[security bulletin] HPSBMU03056 rev.1 - HP Version Control Repository Manager (HP VCRM) running Open' - MARC	HP	marc.info	Third Party Advisory
IBM Security Bulletin: IBM Worklight is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-3470 and CVE-2014-0076 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA58128 - Trend Micro Multiple Products OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03062 rev.1 - HP Insight Control server deployment on Linux and Windows ru' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59878 - HP StoreEver MSL6480 Tape Library OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59101 - VMware OVF Tool OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59528 - BlackBerry Enterprise Service Universal Device Service Component OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM - My notifications	CONFIRM	www14.software.ibm.com	Third Party Advisory
Security Advisory SA59506 - BlackBerry Multiple Products OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59916 - HP NonStop Server OpenSSL Security Issue and Vulnerability - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59362 - Cisco Nexus Multiple Products OpenSSL SSL/TLS Handshake and ECDH Ciphersuites Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59446 - IBM WebSphere Cast Iron Cloud Integration OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03070 rev.1 - HP Cloud Service Automation, OpenSSL Vulnerability, Unauthor' - MARC	HP	marc.info	Third Party Advisory
Oracle Critical Patch Update - January 2015	CONFIRM	www.oracle.com	Third Party Advisory
IBM Security Bulletin: IBM Security Network Intrusion Prevention System is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and CVE-2014-3470. - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59215 - Kerio Control OpenSSL Security Issue and Two SQL Injection Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM notice: The page you requested cannot be displayed	CONFIRM	www.ibm.com	Broken Link
Security Advisory SA60176 - HP Integrity Superdome 2 CB900s i2 and i4 Servers OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59163 - Juniper IVE OS OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA60571 - EMC Documentum Content Server Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59669 - IBM InfoSphere Guardium OpenSSL Security Issue and Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Full Disclosure: NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities	FULLDISC	seclists.org	Mailing List, Third Party Advisory
Security Advisory SA59413 - IBM Initiate Master Data Service / IBM InfoSphere Master Data Management OpenSSL Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03074 rev.1 - HP Insight Control server migration on Linux and Windows run' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59300 - IBM Tivoli Management Framework OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
[security-announce] SUSE-SU-2015:0743-1: important: Security update for	SUSE	lists.opensuse.org	Third Party Advisory
IBM Support	CONFIRM	www-947.ibm.com	Third Party Advisory
'[security bulletin] HPSBMU03089 rev.1 - HP Executive Scorecard, Running OpenSSL, Disclosure of Infor' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59365 - Cisco MDS 9000 / Nexus 7000 OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59441 - IBM Tivoli Network Manager IP Edition OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59518 - IBM Tivoli Workload Scheduler for Applications OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
FileZilla - The free FTP solution	CONFIRM	filezilla-project.org	Third Party Advisory
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com	Third Party Advisory
MySQL :: MySQL Workbench Release Notes :: Changes in MySQL Workbench 6.1.7 (2014-06-27)	CONFIRM	dev.mysql.com	Third Party Advisory
'[security bulletin] HPSBMU03055 rev.1 - HP Smart Update Manager (HP SUM) running OpenSSL, Remote Den' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA58639 - IBM Security Proventia Network Active Bypass (NAB) OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Support	CONFIRM	www-947.ibm.com	Third Party Advisory
Security Advisory SA59990 - Cisco Quantum Policy Suite OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03071 rev.1 - HP Autonomy IDOL, Running OpenSSL, Remote Unauthorized Acces' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59495 - Novell Open Enterprise Server OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59659 - IBM Tivoli Workload Scheduler Distributed OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59885 - Nessus OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM WebSphere Cast Iron Solution is affected by OpenSSL vulnerabilities: CVE-2014-0224 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
'[security bulletin] HPSBMU03053 rev.1 - HP Software Database and Middleware Automation, OpenSSL Vuln' - MARC	HP	marc.info	Third Party Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
www.novell.com/support/kb/doc.php	CONFIRM	www.novell.com	Third Party Advisory
Security Advisory SA59490 - HP Version Control Agent OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA58337 - IBM Upward Integration Modules (UIM) OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM® SDK for Node.js™ is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Support / Security / Advisories / / MDVSA-2015:062 \| Mandriva	MANDRIVA	www.mandriva.com	Third Party Advisory
Security Advisory SA59383 - Trend Micro ServerProtect for Linux OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03065 rev.1 - HP Operations Analytics, OpenSSL Vulnerability, SSL/TLS, Rem' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA58492 - Cisco Multiple Products OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59784 - Novell File Reporter Multiple OpenSSL Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59444 - IBM TS2900 OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59043 - IBM Security Virtual Server Protection for VMware OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
CVE-2014-0224 Cryptographic Issues vulnerability in WAN Boot (Third Party Vulnerability Resolution Blog)	CONFIRM	blogs.oracle.com	Third Party Advisory
IBM Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is affected by the following OpenSSL vulnerabilities: CVE-2014-0224 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Bulletin: IBM Sterling Connect:Enterprise for UNIX affected by the following OpenSSL vulnerability (CVE-2014-0224).	CONFIRM	www.ibm.com	Third Party Advisory
Security Advisory SA59721 - IBM SmartCloud Provisioning OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products - Huawei PSIRT	CONFIRM	www.huawei.com	Third Party Advisory
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.4 Interim Fix 13 README Tivoli Composite Application Manager for Transactions 7.4.0.0 7.4.0.0-TIV-CAMIS-IF0013 Readme - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59389 - Oracle Solaris WAN Boot OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
Security Advisory SA59435 - IBM WebSphere DataPower Service Gateway XG45 OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59483 - IBM Watson Explorer OpenSSL Security Issue and Vulnerability - Secunia	SECUNIA	secunia.com	Third Party Advisory
Page not found - Snare Solutions	CONFIRM	www.intersectalliance.com	Third Party Advisory
'[security bulletin] HPSBOV03047 rev.1 - HP OpenVMS running OpenSSL, Remote Denial of Service (DoS), ' - MARC	HP	marc.info	Third Party Advisory
About Secunia Research \| Flexera	SECUNIA	secunia.com	Third Party Advisory
Bug 1103586 – CVE-2014-0224 openssl: SSL/TLS MITM vulnerability	CONFIRM	bugzilla.redhat.com	Issue Tracking
'[security bulletin] HPSBGN03068 rev.1 - HP OneView running OpenSSL, Remote Denial of Service (DoS), ' - MARC	HP	marc.info	Third Party Advisory
IBM Support	CONFIRM	www-947.ibm.com	Third Party Advisory
Security Advisory SA59188 - Blue Coat Multiple Products OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBHF03145 rev.1 - HP Integrity Superdome X and HP Converged System 900 for SAP' - MARC	HP	marc.info	Third Party Advisory
git.openssl.org Git - openssl.git/commit		git.openssl.org
CVE-2014-0224 Cryptographic Issues vulnerability in OpenSSL (Third Party Vulnerability Resolution Blog)	CONFIRM	blogs.oracle.com	Third Party Advisory
Security Advisory SA59460 - Cisco Wireless LAN Controller (WLC) OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59191 - Blue Coat Security Analytics Platform OpenSSL Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products	CISCO	tools.cisco.com	Third Party Advisory
IBM Tivoli Endpoint Manager for Remote Control Interim Fix 8.2.0-TIV-TEMRC820-IF0002 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
'[security bulletin] HPSBST03097 rev.1 - HP Command View for Tape Libraries (CVTL) running OpenSSL, R' - MARC	HP	marc.info	Third Party Advisory
IBM Security Bulletin: IBM Security Virtual Server Protection for VMware is affected by the following OpenSSL vulnerability: CVE-2014-0224 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59055 - IBM QRadar SIEM OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: Rational ClearCase is affected by OpenSSL vulnerabilities (CVE-2014-0224, CVE-2014-3470, CVE-2015-0292) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Bulletin: IBM XIV Gen3 Storage System is exposed to the following OpenSSL vulnerability: CVE-2014-0224	CONFIRM	www.ibm.com	Third Party Advisory
Security Advisory SA59525 - IBM Sterling Connect:Express for UNIX OpenSSL Security Issue and Two Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59429 - Cisco IOS OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Bulletin: TS3400 is affected by the following OpenSSL vulnerabilities: CVE-2014-0224	CONFIRM	www.ibm.com	Third Party Advisory
'[security bulletin] HPSBUX03046 SSRT101590 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (' - MARC	HP	marc.info	Third Party Advisory
'[security bulletin] HPSBMU03058 rev.1 - HP BladeSystem c-Class Onboard Administrator (OA) running Op' - MARC	HP	marc.info	Third Party Advisory
IBM Security Bulletin: Security Bulletin: IBM Sterling Connect:Direct for UNIX is affected by the following OpenSSL vulnerabilities: CVE-2014-0224 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
IBM notice: The page you requested cannot be displayed	CONFIRM	www-01.ibm.com	Third Party Advisory
www.openssl.org/news/secadv_20140605.txt	CONFIRM	www.openssl.org	Vendor Advisory
Security Advisory SA58745 - Tenable Passive Vulnerability Scanner OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Gentoo Linux Documentation -- OpenSSL: Multiple vulnerabilities	GENTOO	security.gentoo.org	Third Party Advisory
Security Advisory SA59063 - IBM Power Systems OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: Power Systems Firmware is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Oracle Critical Patch Update - October 2014	CONFIRM	www.oracle.com	Third Party Advisory
IBM Tivoli Endpoint Manager for Remote Control Interim Fix 8.2.1-TIV-TEMRC821-IF0007 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Oracle Critical Patch Update - July 2014	CONFIRM	www.oracle.com	Third Party Advisory
IBM Security Bulletin: IBM MessageSight is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, and CVE-2014-0195) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Juniper Networks - 2014-06 Out of Cycle Security Bulletin: Vulnerabilities in OpenSSL related to ChangeCipherSpec, DTLS, SSL_MODE_RELEASE_BUFFERS and ECDH ciphersuites - Knowledge Base	CONFIRM	kb.juniper.net	Not Applicable
IBM notice: The page you requested cannot be displayed	CONFIRM	www-01.ibm.com	Third Party Advisory
[security-announce] openSUSE-SU-2016:0640-1: important: Security update	SUSE	lists.opensuse.org	Third Party Advisory
'[security bulletin] HPSBMU03076 rev.2 - HP Systems Insight Manager (SIM) on Linux and Windows runnin' - MARC	HP	marc.info	Third Party Advisory
IBM Security Bulletin: IBM Sterling Connect:Express for UNIX is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA58433 - Tableau Desktop / Reader OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBMU03051 rev.2 - HP System Management Homepage running OpenSSL on Linux and W' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA58667 - Cisco Multiple Products OpenSSL SSL/TLS Handshake Security Issue and Two Denial of Service Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59310 - Novell Messenger OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: Tivoli Storage Productivity Center is affected by the following OpenSSL vulnerabilities: CVE-2014-0224 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
'[security bulletin] HPSBMU03083 rev.2 - HP BladeSystem c-Class Virtual Connect Firmware running Open' - MARC	HP	marc.info	Third Party Advisory
IT02314: CVE-2014-0224 - VULNERABILITY IN SSL CHANGECIPHERSPEC PROCESSING	AIXAPAR	www.ibm.com	Third Party Advisory
Security Advisory SA59004 - IBM Tivoli Storage Productivity Center OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Kerio Control small business firewall	CONFIRM	www.kerio.com	Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf	CONFIRM	cert-portal.siemens.com	Third Party Advisory
IBM Security Bulletin: SmartCloud Orchestrator is affected by the following OpenSSL vulnerabilities (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470, CVE-2014-0076) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59824 - IBM Flex System Integrated Management Module 2 (IMM2) OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59190 - Blue Coat ProxySG OpenSSL SSL/TLS Handshake Security Issue and Denial of Service Vulnerability - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Image Construction and Composition Tool is affected by OpenSSL vulnerabilities - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
IBM notice: The page you requested cannot be displayed	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59602 - IBM Switches OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM SDK for Node.js 1.1.0.4 for use by the Cordova tools	CONFIRM	www.ibm.com	Third Party Advisory
Security Advisory SA59126 - Huawei Multiple Products Multiple OpenSSL Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: Tivoli Management Framework is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and possibly CVE-2014-0076. - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
IBM WebSphere MQ for HP NonStop Server V5.3.1 fix pack 5.3.1.10 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA58759 - IBM SAN Volume Controller and Storwize Family OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59189 - Blue Coat IntelligenceCenter OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59284 - Cisco Prime Network OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
'[security bulletin] HPSBPI03107 rev.1 - Certain HP LaserJet Printers, MFPs and Certain HP OfficeJet ' - MARC	HP	marc.info	Third Party Advisory
IBM Support	CONFIRM	www-947.ibm.com	Third Party Advisory
openSUSE-SU-2015:0229-1: moderate: Security update for virtualbox	SUSE	lists.opensuse.org	Third Party Advisory
ImperialViolet - Early ChangeCipherSpec Attack	MISC	www.imperialviolet.org	Exploit
'[security bulletin] HPSBST03106 rev.1 - HP P2000 G3 MSA Array System running OpenSSL, Remote Unautho' - MARC	HP	marc.info	Third Party Advisory
SecurityFocus	BUGTRAQ	www.securityfocus.com	Not Applicable
Page not found - Snare Solutions	CONFIRM	www.intersectalliance.com	Third Party Advisory
www.blackberry.com/btsc/KB36051	CONFIRM	www.blackberry.com	Third Party Advisory
Security Advisory SA61254 - IBM InfoSphere Guardium Database Activity Monitor Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM Security Bulletin: IBM Security Proventia Network Active Bypass is affected by vulnerabilities in OpenSSL (CVE-2014-0224) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA59491 - BlackBerry OS OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
fsc-2014-6 \| F-Secure Labs	CONFIRM	www.f-secure.com	Third Party Advisory
IBM Security Bulletin: IBM Security Network Protection is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20	FEDORA	lists.fedoraproject.org	Third Party Advisory
Red Hat Customer Portal	REDHAT	rhn.redhat.com	Third Party Advisory
Security Advisory SA58939 - IBM SmartCloud Orchestrator OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
'[security bulletin] HPSBST03098 rev.1 - HP StoreEver MSL6480 Tape Library running OpenSSL, Remote Un' - MARC	HP	marc.info	Third Party Advisory
Security Advisory SA59135 - IBM XIV Storage System OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59445 - IBM Worklight OpenSSL Security Issue and Vulnerability - Secunia	SECUNIA	secunia.com	Third Party Advisory
Oracle Critical Patch Update - July 2017	CONFIRM	www.oracle.com	Third Party Advisory
IBM Security Bulletin: IBM Tivoli Network Manager IP Edition V39 Fix Pack 4 HTTPS support for Perl Collector install is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
Oracle Critical Patch Update - October 2017	CONFIRM	www.oracle.com	Third Party Advisory
IBM Support	CONFIRM	www-947.ibm.com	Third Party Advisory
Security Advisory SA59459 - Splunk OpenSSL Security Issue and Vulnerability - Secunia	SECUNIA	secunia.com	Third Party Advisory
Sun Integrated Lights-Out Manager Bugs Let Remote Authenticated Users Partially Access Data, Modify Data, and Deny Service - SecurityTracker	SECTRACK	www.securitytracker.com	Third Party Advisory, VDB Entry
VMSA-2014-0006.11 \| United States	CONFIRM	www.vmware.com	Third Party Advisory
Security Advisory SA59186 - IBM Image Construction and Composition Tool OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA60522 - HP AssetManager OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59440 - IBM Security Network Protection Security Issue and Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59364 - HP-UX update for OpenSSL - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59012 - IBM SAN Volume Controller and Storwize Family OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA58579 - Cisco Multiple Products OpenSSL SSL/TLS Handshake and Denial of Service Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
IBM notice: The page you requested cannot be displayed	CONFIRM	www-01.ibm.com	Third Party Advisory
Security Advisory SA60577 - HP Connect-It (CIT) OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
linux.oracle.com \| ELSA-2014-1053 - openssl security update	CONFIRM	linux.oracle.com	Third Party Advisory
IBM Security Bulletin: IBM X Series hardware IMMv1, IMMv2 remote management ports as used by IBM QRadar SIEM appliances are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224) - United States	CONFIRM	www-01.ibm.com	Third Party Advisory
IBM IV61506: CHANGES TO ADDRESS CVE-2014-0224 - United States	AIXAPAR	www-01.ibm.com	Third Party Advisory
Security Advisory SA59093 - Juniper Multiple Products OpenSSL SSL/TLS Handshake Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA58385 - Trend Micro Deep Security OpenSSL SSL/TLS Handshakes Security Issue - Secunia	SECUNIA	secunia.com	Third Party Advisory
Security Advisory SA59306 - IBM i OpenSSL Multiple Vulnerabilities - Secunia	SECUNIA	secunia.com	Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

377614 Filezilla Server Information Disclosure Vulnerability (CVE-2014-0224)
390226 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2021-0011)
390284 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2023-0013)
590349 Rockwell Automation Stratix 5900 Multiple Vulnerabilities (ICSA-17-094-04)
590887 Phoenix Contact Innominate mGuard devices Open Secure Sockets Layer (OpenSSL) Transport Layer Security (TLS) Man-in-the-Middle (MITM) Vulnerability (20140606_001)
591350 General Electric D20MX Open Secure Sockets Layer (OpenSSL) Multiple Vulnerabilities (PRSN-0006)