CVE-2014-3470

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2014-3470
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2014-06-05 21:55:00 UTC
Updated2023-11-07 02:20:00 UTC
DescriptionThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

Risk And Classification

Problem Types: CWE-476

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Fedoraproject Fedora All All All All
Operating System Fedoraproject Fedora 19 All All All
Operating System Fedoraproject Fedora 20 All All All
Operating System Fedoraproject Fedora All All All All
Application Mariadb Mariadb All All All All
Application Mariadb Mariadb 10.0.0 All All All
Application Openssl Openssl All All All All
Application Openssl Openssl 0.9.8 All All All
Application Openssl Openssl 0.9.8a All All All
Application Openssl Openssl 0.9.8b All All All
Application Openssl Openssl 0.9.8c All All All
Application Openssl Openssl 0.9.8d All All All
Application Openssl Openssl 0.9.8e All All All
Application Openssl Openssl 0.9.8f All All All
Application Openssl Openssl 0.9.8g All All All
Application Openssl Openssl 0.9.8h All All All
Application Openssl Openssl 0.9.8i All All All
Application Openssl Openssl 0.9.8j All All All
Application Openssl Openssl 0.9.8k All All All
Application Openssl Openssl 0.9.8l All All All
Application Openssl Openssl 0.9.8m All All All
Application Openssl Openssl 0.9.8m beta1 All All
Application Openssl Openssl 0.9.8n All All All
Application Openssl Openssl 0.9.8o All All All
Application Openssl Openssl 0.9.8p All All All
Application Openssl Openssl 0.9.8q All All All
Application Openssl Openssl 0.9.8r All All All
Application Openssl Openssl 0.9.8s All All All
Application Openssl Openssl 0.9.8t All All All
Application Openssl Openssl 0.9.8u All All All
Application Openssl Openssl 0.9.8v All All All
Application Openssl Openssl 0.9.8w All All All
Application Openssl Openssl 0.9.8x All All All
Application Openssl Openssl 1.0.0 All All All
Application Openssl Openssl 1.0.0 beta1 All All
Application Openssl Openssl 1.0.0 beta2 All All
Application Openssl Openssl 1.0.0 beta3 All All
Application Openssl Openssl 1.0.0 beta4 All All
Application Openssl Openssl 1.0.0 beta5 All All
Application Openssl Openssl 1.0.0a All All All
Application Openssl Openssl 1.0.0b All All All
Application Openssl Openssl 1.0.0c All All All
Application Openssl Openssl 1.0.0d All All All
Application Openssl Openssl 1.0.0e All All All
Application Openssl Openssl 1.0.0f All All All
Application Openssl Openssl 1.0.0g All All All
Application Openssl Openssl 1.0.0h All All All
Application Openssl Openssl 1.0.0i All All All
Application Openssl Openssl 1.0.0j All All All
Application Openssl Openssl 1.0.0k All All All
Application Openssl Openssl 1.0.0l All All All
Application Openssl Openssl 1.0.1 All All All
Application Openssl Openssl 1.0.1 beta1 All All
Application Openssl Openssl 1.0.1 beta2 All All
Application Openssl Openssl 1.0.1 beta3 All All
Application Openssl Openssl 1.0.1a All All All
Application Openssl Openssl 1.0.1b All All All
Application Openssl Openssl 1.0.1c All All All
Application Openssl Openssl 1.0.1d All All All
Application Openssl Openssl 1.0.1e All All All
Application Openssl Openssl 1.0.1f All All All
Application Openssl Openssl 1.0.1g All All All
Application Openssl Openssl All All All All
Application Openssl Openssl 0.9.8 All All All
Application Openssl Openssl 0.9.8a All All All
Application Openssl Openssl 0.9.8b All All All
Application Openssl Openssl 0.9.8c All All All
Application Openssl Openssl 0.9.8d All All All
Application Openssl Openssl 0.9.8e All All All
Application Openssl Openssl 0.9.8f All All All
Application Openssl Openssl 0.9.8g All All All
Application Openssl Openssl 0.9.8h All All All
Application Openssl Openssl 0.9.8i All All All
Application Openssl Openssl 0.9.8j All All All
Application Openssl Openssl 0.9.8k All All All
Application Openssl Openssl 0.9.8l All All All
Application Openssl Openssl 0.9.8m All All All
Application Openssl Openssl 0.9.8m beta1 All All
Application Openssl Openssl 0.9.8n All All All
Application Openssl Openssl 0.9.8o All All All
Application Openssl Openssl 0.9.8p All All All
Application Openssl Openssl 0.9.8q All All All
Application Openssl Openssl 0.9.8r All All All
Application Openssl Openssl 0.9.8s All All All
Application Openssl Openssl 0.9.8t All All All
Application Openssl Openssl 0.9.8u All All All
Application Openssl Openssl 0.9.8v All All All
Application Openssl Openssl 0.9.8w All All All
Application Openssl Openssl 0.9.8x All All All
Application Openssl Openssl 1.0.0 All All All
Application Openssl Openssl 1.0.0 beta1 All All
Application Openssl Openssl 1.0.0 beta2 All All
Application Openssl Openssl 1.0.0 beta3 All All
Application Openssl Openssl 1.0.0 beta4 All All
Application Openssl Openssl 1.0.0 beta5 All All
Application Openssl Openssl 1.0.0a All All All
Application Openssl Openssl 1.0.0b All All All
Application Openssl Openssl 1.0.0c All All All
Application Openssl Openssl 1.0.0d All All All
Application Openssl Openssl 1.0.0e All All All
Application Openssl Openssl 1.0.0f All All All
Application Openssl Openssl 1.0.0g All All All
Application Openssl Openssl 1.0.0h All All All
Application Openssl Openssl 1.0.0i All All All
Application Openssl Openssl 1.0.0j All All All
Application Openssl Openssl 1.0.0k All All All
Application Openssl Openssl 1.0.0l All All All
Application Openssl Openssl 1.0.1 All All All
Application Openssl Openssl 1.0.1 beta1 All All
Application Openssl Openssl 1.0.1 beta2 All All
Application Openssl Openssl 1.0.1 beta3 All All
Application Openssl Openssl 1.0.1a All All All
Application Openssl Openssl 1.0.1b All All All
Application Openssl Openssl 1.0.1c All All All
Application Openssl Openssl 1.0.1d All All All
Application Openssl Openssl 1.0.1e All All All
Application Openssl Openssl 1.0.1f All All All
Application Openssl Openssl 1.0.1g All All All
Operating System Opensuse Leap 42.1 All All All
Operating System Opensuse Opensuse 13.2 All All All
Operating System Redhat Enterprise Linux 5 All All All
Operating System Redhat Enterprise Linux 6.0 All All All
Operating System Redhat Enterprise Linux 5 All All All
Operating System Redhat Enterprise Linux 6.0 All All All
Application Redhat Storage 2.1 All All All
Application Redhat Storage 2.1 All All All
Operating System Suse Linux Enterprise Desktop 12 - All All
Operating System Suse Linux Enterprise Server 12 - All All
Operating System Suse Linux Enterprise Software Development Kit 12 - All All
Operating System Suse Linux Enterprise Workstation Extension 12 All All All

References

ReferenceSourceLinkTags
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
kb.bluecoat.com/index CONFIRM kb.bluecoat.com
'[security bulletin] HPSBGN03050 rev.1 - HP IceWall SSO Dfw and HP IceWall MCRP running OpenSSL, Remo' - MARC HP marc.info
Security Advisory SA59223 - F-Secure E-mail and Server Security / Server Security OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59301 - HP Version Control Repository Manager (VCRM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58977 - IBM BladeCenter Advanced Management Module Firmware OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
OpenSSL CVE-2014-3470 Denial of Service Vulnerability BID www.securityfocus.com
Security Advisory SA59162 - McAfee Multiple Products OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States CONFIRM www-01.ibm.com
Security Advisory SA58945 - IBM FastSetup OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Support | OpenSSL Security Advisory (05 June 2014) and Open Enterprise Server 2 SP3. CONFIRM www.novell.com
Juniper Networks - Junos Pulse/SA (SSLVPN): Details on fixes for SSL/TLS MITM vulnerability (CVE-2014-0224)/JSA10629 - Knowledge Base CONFIRM kb.juniper.net
Security Advisory SA59167 - Cisco Intrusion Prevention System (IPS) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Se curity Bulletin: Tivoli Workload Scheduler is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
Security Advisory SA59442 - IBM WebSphere MQ for HP NonStop Server OpenSSL SSL/TLS Handshakes Security Issue - Secunia SECUNIA secunia.com
IBM notice: The page you requested cannot be displayed CONFIRM www.ibm.com
About Secunia Research | Flexera SECUNIA secunia.com
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc CONFIRM aix.software.ibm.com
Security Advisory SA59342 - HP Smart Update Manager (HP SUM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Splunk Enterprise 6.1.2, 6.0.5 and 5.0.9 address two vulnerabilities - July 1, 2014 | Splunk CONFIRM www.splunk.com
About the security content of OS X Mavericks v10.9.5 and Security Update 2014-004 - Apple Support CONFIRM support.apple.com
Security Advisory SA59451 - IBM Tivoli Composite Application Manager for Transactions OpenSSL Security Issue and Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59514 - HP System Management Homepage OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59192 - Cisco TelePresence Server OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Initiate Master Data Service, IBM InfoSphere Master Data Management are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and CVE-2014-0076) - United States CONFIRM www-01.ibm.com
Security Advisory SA58742 - IBM Rational ClearCase OpenSSL Security Issue and Vulnerability - Secunia SECUNIA secunia.com
Citrix Security Advisory for OpenSSL Vulnerabilities (June 2014) CONFIRM support.citrix.com
Security Advisory SA59655 - IBM SmartCloud Provisioning for IBM Provided Software Virtual Appliance OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Security Access Manager for Mobile and IBM Security Access Manager for Web appliances are affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and possibly CVE-2014-0076 - United States CONFIRM www-01.ibm.com
[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19 FEDORA lists.fedoraproject.org
Security Advisory SA59287 - IBM Proventia Network Enterprise Scanner OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM InfoSphere Guardium Database Activity Monitor is affected by CVE-2014-0221, CVE-2014-0224, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
VMSA-2014-0012 | United States CONFIRM www.vmware.com
Support | OpenSSL Security Advisory (05 June 2014) and Open Enterprise Server 11 SP1. CONFIRM www.novell.com
Security Advisory SA59437 - IBM Rational Application Developer for WebSphere Software OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning. - United States CONFIRM www-01.ibm.com
Security Advisory SA58797 - Cisco ONS 15454 Series OpenSSL ECDH Ciphersuites Denial of Service Vulnerability - Secunia SECUNIA secunia.com
Security Advisory SA59264 - Cisco WebEx Meetings Server / Unified Communications Manager OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
[security-announce] SUSE-SU-2015:0578-1: important: Security update for SUSE lists.opensuse.org
Security Advisory SA58716 - IBM Rational ClearQuest Security Issue and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
www.mandriva.com MANDRIVA www.mandriva.com
Security Advisory SA59666 - IBM SDK for Node.js OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59175 - HP OpenVMS update for SSL - Secunia SECUNIA secunia.com
Security Advisory SA58713 - IBM Multiple Products OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Security Proventia Network Enterprise Scanner is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
Security Advisory SA59450 - IBM API Management OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
Security Advisory SA59120 - IBM Hardware Management Console (HMC) OpenSSL Security Issue and Two Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM i is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198 and CVE-2014-3470 - United States CONFIRM www-01.ibm.com
www.mandriva.com MANDRIVA www.mandriva.com
Security Bulletin: Rational Application Developer is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 CONFIRM www.ibm.com
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.3.0.1 Interim Fix 29 README Tivoli Composite Application Manager for Transactions 7.3.0.1 7.3.0.1-TIV-CAMIS-IF0029 Readme - United States CONFIRM www-01.ibm.com
Security Advisory SA59282 - Cisco Multiple Products OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59449 - IBM Security Network Intrusion Prevention System OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
McAfee KnowledgeBase - McAfee Security Bulletin – Seven OpenSSL vulnerabilities patched in McAfee products CONFIRM kc.mcafee.com
Security Advisory SA59438 - IBM Security Access Manager for Web / Security Access Manager for Mobile Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58615 - IBM Tivoli Netcool System Service Monitors Multiple Security Issues and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03057 rev.1 - HP Version Control Agent (HP VCA) running OpenSSL on Linux a' - MARC HP marc.info
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd CONFIRM www14.software.ibm.com
IBM Security Bulletin: WebSphere MQ is affected by the following OpenSSL vulnerabilities: CVE-2014-0224 & CVE-2014-3470 - United States CONFIRM www-01.ibm.com
'[security bulletin] HPSBMU03056 rev.1 - HP Version Control Repository Manager (HP VCRM) running Open' - MARC HP marc.info
IBM Security Bulletin: IBM Worklight is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-3470 and CVE-2014-0076 - United States CONFIRM www-01.ibm.com
'[security bulletin] HPSBMU03062 rev.1 - HP Insight Control server deployment on Linux and Windows ru' - MARC HP marc.info
IBM - My notifications CONFIRM www14.software.ibm.com
Security Advisory SA59916 - HP NonStop Server OpenSSL Security Issue and Vulnerability - Secunia SECUNIA secunia.com
Security Advisory SA59362 - Cisco Nexus Multiple Products OpenSSL SSL/TLS Handshake and ECDH Ciphersuites Vulnerabilities - Secunia SECUNIA secunia.com
Oracle Critical Patch Update - January 2015 CONFIRM www.oracle.com
IBM Security Bulletin: IBM Security Network Intrusion Prevention System is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and CVE-2014-3470. - United States CONFIRM www-01.ibm.com
Security Advisory SA60571 - EMC Documentum Content Server Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59669 - IBM InfoSphere Guardium OpenSSL Security Issue and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Full Disclosure: NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities FULLDISC seclists.org
Security Advisory SA59413 - IBM Initiate Master Data Service / IBM InfoSphere Master Data Management OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03074 rev.1 - HP Insight Control server migration on Linux and Windows run' - MARC HP marc.info
Security Advisory SA59300 - IBM Tivoli Management Framework OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
[security-announce] SUSE-SU-2015:0743-1: important: Security update for SUSE lists.opensuse.org
Security Advisory SA59365 - Cisco MDS 9000 / Nexus 7000 OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59441 - IBM Tivoli Network Manager IP Edition OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59518 - IBM Tivoli Workload Scheduler for Applications OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Document Display | HPE Support Center CONFIRM h20566.www2.hpe.com
'[security bulletin] HPSBMU03055 rev.1 - HP Smart Update Manager (HP SUM) running OpenSSL, Remote Den' - MARC HP marc.info
IBM Support CONFIRM www-947.ibm.com
Security Advisory SA59990 - Cisco Quantum Policy Suite OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBMU03069 rev.1 - HP Software Operation Orchestration, OpenSSL Vulnerability, ' - MARC HP marc.info
Security Advisory SA59495 - Novell Open Enterprise Server OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59659 - IBM Tivoli Workload Scheduler Distributed OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
git.openssl.org Git - openssl.git/commit git.openssl.org
git.openssl.org Git - openssl.git/commit CONFIRM git.openssl.org Patch
www.novell.com/support/kb/doc.php CONFIRM www.novell.com
Security Advisory SA59490 - HP Version Control Agent OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA58337 - IBM Upward Integration Modules (UIM) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM® SDK for Node.js™ is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
Support / Security / Advisories / / MDVSA-2015:062 | Mandriva MANDRIVA www.mandriva.com
'[security bulletin] HPSBMU03065 rev.1 - HP Operations Analytics, OpenSSL Vulnerability, SSL/TLS, Rem' - MARC HP marc.info
Security Advisory SA59784 - Novell File Reporter Multiple OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59721 - IBM SmartCloud Provisioning OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products - Huawei PSIRT CONFIRM www.huawei.com
IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.4 Interim Fix 13 README Tivoli Composite Application Manager for Transactions 7.4.0.0 7.4.0.0-TIV-CAMIS-IF0013 Readme - United States CONFIRM www-01.ibm.com
About Secunia Research | Flexera SECUNIA secunia.com
Security Advisory SA59483 - IBM Watson Explorer OpenSSL Security Issue and Vulnerability - Secunia SECUNIA secunia.com
'[security bulletin] HPSBOV03047 rev.1 - HP OpenVMS running OpenSSL, Remote Denial of Service (DoS), ' - MARC HP marc.info
IBM Support CONFIRM www-947.ibm.com
Security Advisory SA59460 - Cisco Wireless LAN Controller (WLC) OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59191 - Blue Coat Security Analytics Platform OpenSSL Two Vulnerabilities - Secunia SECUNIA secunia.com
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products CISCO tools.cisco.com
IBM Security Bulletin: Rational ClearCase is affected by OpenSSL vulnerabilities (CVE-2014-0224, CVE-2014-3470, CVE-2015-0292) - United States CONFIRM www-01.ibm.com
support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.html CONFIRM support.f5.com
Security Advisory SA59525 - IBM Sterling Connect:Express for UNIX OpenSSL Security Issue and Two Vulnerabilities - Secunia SECUNIA secunia.com
'[security bulletin] HPSBUX03046 SSRT101590 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (' - MARC HP marc.info
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
www.openssl.org/news/secadv_20140605.txt CONFIRM www.openssl.org Vendor Advisory
Gentoo Linux Documentation -- OpenSSL: Multiple vulnerabilities GENTOO security.gentoo.org
Security Advisory SA59340 - F5 LineRate OpenSSL ECDH Ciphersuites Denial of Service Vulnerability - Secunia SECUNIA secunia.com
Oracle Critical Patch Update - October 2014 CONFIRM www.oracle.com
Oracle Critical Patch Update - July 2014 CONFIRM www.oracle.com
Juniper Networks - 2014-06 Out of Cycle Security Bulletin: Vulnerabilities in OpenSSL related to ChangeCipherSpec, DTLS, SSL_MODE_RELEASE_BUFFERS and ECDH ciphersuites - Knowledge Base CONFIRM kb.juniper.net
Security Advisory SA59431 - F5 Multiple Products OpenSSL ECDH Ciphersuites Denial of Service Vulnerability - Secunia SECUNIA secunia.com
[security-announce] openSUSE-SU-2016:0640-1: important: Security update SUSE lists.opensuse.org
'[security bulletin] HPSBMU03076 rev.2 - HP Systems Insight Manager (SIM) on Linux and Windows runnin' - MARC HP marc.info
IBM Security Bulletin: IBM Sterling Connect:Express for UNIX is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
'[security bulletin] HPSBMU03051 rev.2 - HP System Management Homepage running OpenSSL on Linux and W' - MARC HP marc.info
Security Advisory SA58667 - Cisco Multiple Products OpenSSL SSL/TLS Handshake Security Issue and Two Denial of Service Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59310 - Novell Messenger OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf CONFIRM cert-portal.siemens.com
IBM Security Bulletin: SmartCloud Orchestrator is affected by the following OpenSSL vulnerabilities (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470, CVE-2014-0076) - United States CONFIRM www-01.ibm.com
IBM notice: The page you requested cannot be displayed CONFIRM www-01.ibm.com
IBM SDK for Node.js 1.1.0.4 for use by the Cordova tools CONFIRM www.ibm.com
Security Advisory SA59126 - Huawei Multiple Products Multiple OpenSSL Vulnerabilities - Secunia SECUNIA secunia.com
IBM Security Bulletin: Tivoli Management Framework is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and possibly CVE-2014-0076. - United States CONFIRM www-01.ibm.com
IBM WebSphere MQ for HP NonStop Server V5.3.1 fix pack 5.3.1.10 - United States CONFIRM www-01.ibm.com
Security Advisory SA59189 - Blue Coat IntelligenceCenter OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59284 - Cisco Prime Network OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
IBM Support CONFIRM www-947.ibm.com
SecurityFocus BUGTRAQ www.securityfocus.com
www.blackberry.com/btsc/KB36051 CONFIRM www.blackberry.com
Security Advisory SA61254 - IBM InfoSphere Guardium Database Activity Monitor Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59491 - BlackBerry OS OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
fsc-2014-6 | F-Secure Labs CONFIRM www.f-secure.com
IBM Security Bulletin: IBM Security Network Protection is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 - United States CONFIRM www-01.ibm.com
[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20 FEDORA lists.fedoraproject.org
Security Advisory SA58939 - IBM SmartCloud Orchestrator OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59445 - IBM Worklight OpenSSL Security Issue and Vulnerability - Secunia SECUNIA secunia.com
IBM Security Bulletin: IBM Tivoli Network Manager IP Edition V39 Fix Pack 4 HTTPS support for Perl Collector install is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CVE-2014-3470) - United States CONFIRM www-01.ibm.com
Oracle Critical Patch Update - October 2017 CONFIRM www.oracle.com
IBM Support CONFIRM www-947.ibm.com
Security Advisory SA59459 - Splunk OpenSSL Security Issue and Vulnerability - Secunia SECUNIA secunia.com
Bug 1103600 – CVE-2014-3470 openssl: client-side denial of service when using anonymous ECDH CONFIRM bugzilla.redhat.com
VMSA-2014-0006.11 | United States CONFIRM www.vmware.com
Security Advisory SA59440 - IBM Security Network Protection Security Issue and Multiple Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59364 - HP-UX update for OpenSSL - Secunia SECUNIA secunia.com
Security Advisory SA58579 - Cisco Multiple Products OpenSSL SSL/TLS Handshake and Denial of Service Vulnerabilities - Secunia SECUNIA secunia.com
Security Advisory SA59306 - IBM i OpenSSL Multiple Vulnerabilities - Secunia SECUNIA secunia.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 390226 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2021-0011)
  • 390284 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2023-0013)
  • 590349 Rockwell Automation Stratix 5900 Multiple Vulnerabilities (ICSA-17-094-04)
  • 591311 Bosch Rexroth PRA-ES8P2S Ethernet-Switch Multiple Vulnerabilities (BOSCH-SA-247053-BT)
  • 591350 General Electric D20MX Open Secure Sockets Layer (OpenSSL) Multiple Vulnerabilities (PRSN-0006)
  • 672328 EulerOS Security Update for Open Secure Sockets Layer098e (OpenSSL098e) (EulerOS-SA-2022-2717)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report