OpenSSL 'ssl23_get_client_hello()' Function NULL Pointer Dereference Denial of Service Vulnerability
BID:71934
Info
OpenSSL 'ssl23_get_client_hello()' Function NULL Pointer Dereference Denial of Service Vulnerability
| Bugtraq ID: | 71934 |
| Class: | Design Error |
| CVE: |
CVE-2014-3569 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 17 2014 12:00AM |
| Updated: | Jan 23 2017 12:09AM |
| Credit: | Frank Schmirler |
| Vulnerable: |
SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise Server for VMware 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 Splunk MINT 0 Splunk Cloud 0 Splunk App for VMware 0 Splunk App for Stream 0 Splunk App for NetApp Data ONTAP 0 Oracle MySQL Server 5.6.22 Oracle MySQL Server 5.6.21 Oracle MySQL Server 5.6.16 Oracle MySQL Server 5.6.15 Oracle MySQL Server 5.6 Oracle Mobile Security Suite MSS 3.0 Oracle Communications Core Session Manager 7.3.5 Oracle Communications Core Session Manager 7.2.5 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 1.0.1j OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1b OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0o OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0m OpenSSL Project OpenSSL 1.0.0L OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0H OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 0.9.8zc OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8za OpenSSL Project OpenSSL 0.9.8y OpenSSL Project OpenSSL 0.9.8X OpenSSL Project OpenSSL 0.9.8w OpenSSL Project OpenSSL 0.9.8U OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8 f OpenSSL Project OpenSSL 0.9.8v Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Juniper vGW 0 Juniper SRC Series 0 Juniper SBR Carrier 0 Juniper RingMaster Appliance 0 Juniper Pulse Secure 0 Juniper NSM 0 Juniper JUNOS Space 0 Juniper Junos OS 0 Juniper IDP 0 Juniper DDoS Secure 0 Juniper CTPView 0 Juniper CTP 0 IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.2 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.2 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5 IBM Tivoli Workload Scheduler Distributed 9.2 IBM Tivoli Workload Scheduler Distributed 8.6 IBM Tivoli Workload Scheduler Distributed 8.5.1 FP04 IBM Tivoli Workload Scheduler Distributed 8.5.1 IBM Tivoli Workload Scheduler Distributed 8.5 FP05 IBM Tivoli Workload Scheduler Distributed 8.5 IBM Tivoli Workload Scheduler Distributed 8.4 FP07 IBM Tivoli Workload Scheduler Distributed 8.4 IBM Tivoli Workload Scheduler Distributed 9.2.0 FP01 IBM Tivoli Workload Scheduler Distributed 9.1.0 FP01 IBM Tivoli Workload Scheduler Distributed 9.1 IBM Tivoli Workload Scheduler Distributed 8.6.0 FP03 IBM Tivoli Workload Scheduler Distributed 8.6 FP02 IBM Tivoli Workload Scheduler Distributed 8.5.1 FP05 IBM Tivoli Workload Scheduler Distributed 8.5 FP04 IBM Tivoli Workload Scheduler Distributed 8.5 FP03 IBM Tivoli Provisioning Manager for OS Deployment 5.1 .3 IBM Tivoli Provisioning Manager for OS Deployment 5.1 .116 IBM Tivoli Provisioning Manager for OS Deployment 5.1 IBM Tivoli Provisioning Manager for OS Deployment 7.1.1 IBM Tivoli Provisioning Manager for OS Deployment 5.1.0.2 IBM Tivoli Provisioning Manager for Images System x Edition 7.1.1.0 IBM Tivoli Provisioning Manager for Images 7.1.1.0 IBM Tivoli Netcool/Reporter 2.2 IBM Tivoli Common Reporting 2.1.1 IBM Tivoli Common Reporting 3.1.0.2 IBM Tivoli Common Reporting 3.1.0.1 IBM Tivoli Common Reporting 3.1 IBM Tivoli Common Reporting 2.1.1.2 IBM Tivoli Common Reporting 2.1 IBM System x3950 X6 Type 3837 0 IBM System x3850 X6 Type 3837 0 IBM System x3750 M4 Type 8752 0 IBM System x3750 M4 Type 8733 0 IBM System x3750 M4 Type 8722 0 IBM System x3750 M4 Type 8718 0 IBM System x3650 M4 Type 7915 0 IBM System x3650 M4 HD type 5460 0 IBM System x3650 M4 BD type 5466 0 IBM System x3630 M4 Type 7158 0 IBM System x3550 M4 Type 7914 0 IBM System x3530 M4 Type 7160 0 IBM System x3500 M4 Type 7383 0 IBM System x3300 M4 Type 7382 0 IBM System x3250 M5 type 5458 0 IBM System x3250 M4 Type 2583 0 IBM System x3100 M5 type 5457 0 IBM System x3100 M4 Type 2582 0 IBM Storwize V7000 6.4.1 9 IBM Storwize V7000 7.4 IBM Storwize V7000 7.3.0.5 IBM Storwize V7000 7.3 IBM Storwize V7000 7.2.0.8 IBM Storwize V7000 7.2.0.5 IBM Storwize V7000 7.2.0.3 IBM Storwize V7000 7.2 IBM Storwize V7000 7.1.0.7 IBM Storwize V7000 7.1.0.6 IBM Storwize V7000 7.1.0.5 IBM Storwize V7000 7.1 IBM Storwize V7000 6.4.1.8 IBM Storwize V7000 6.4 IBM Storwize V7000 6.3 IBM Storwize V7000 6.2 IBM Storwize V7000 6.1 IBM Storwize V7000 1.1 IBM Storwize V5000 7.4 IBM Storwize V5000 7.3.0.5 IBM Storwize V5000 7.3 IBM Storwize V5000 7.2.0.8 IBM Storwize V5000 7.2.0.5 IBM Storwize V5000 7.2.0.3 IBM Storwize V5000 7.2 IBM Storwize V5000 7.1.0.7 IBM Storwize V5000 7.1.0.6 IBM Storwize V5000 7.1 IBM Storwize V5000 6.4 IBM Storwize V5000 6.3 IBM Storwize V5000 6.2 IBM Storwize V5000 6.1 IBM Storwize V5000 1.1 IBM Storwize V3700 6.4.1 9 IBM Storwize V3700 7.4 IBM Storwize V3700 7.3.0.5 IBM Storwize V3700 7.3 IBM Storwize V3700 7.2.0.8 IBM Storwize V3700 7.2.0.5 IBM Storwize V3700 7.2.0.3 IBM Storwize V3700 7.2 IBM Storwize V3700 7.1.0.7 IBM Storwize V3700 7.1.0.6 IBM Storwize V3700 7.1 IBM Storwize V3700 6.4.1.8 IBM Storwize V3700 6.4 IBM Storwize V3700 6.3 IBM Storwize V3700 6.2 IBM Storwize V3700 6.1 IBM Storwize V3700 1.1 IBM Storwize V3500 6.4.1 9 IBM Storwize V3500 7.4 IBM Storwize V3500 7.3.0.5 IBM Storwize V3500 7.3 IBM Storwize V3500 7.2.0.8 IBM Storwize V3500 7.2.0.5 IBM Storwize V3500 7.2.0.3 IBM Storwize V3500 7.2 IBM Storwize V3500 7.1.0.7 IBM Storwize V3500 7.1.0.6 IBM Storwize V3500 7.1 IBM Storwize V3500 6.4Storwize V3700 IBM Storwize V3500 6.4.1.8 IBM Storwize V3500 6.4 IBM Storwize V3500 6.3 IBM Storwize V3500 6.2 IBM Storwize V3500 6.1 IBM Storwize V3500 1.1 IBM SnapDrive for Windows 7.1.1 IBM SnapDrive for Unix 5.2.2 IBM Smart Analytics System 5710 0 IBM Smart Analytics System 2050 0 IBM Smart Analytics System 1050 0 IBM Service Delivery Manager 7.2.4 IBM Service Delivery Manager 7.2.2 IBM Service Delivery Manager 7.2.1 IBM Security Access Manager for Mobile 8.0.1 IBM Security Access Manager for Mobile 8.0.0.5 IBM Security Access Manager for Mobile 8.0.0.4 IBM Security Access Manager for Mobile 8.0.0.3 IBM Security Access Manager for Mobile 8.0.0.1 IBM Security Access Manager for Mobile 8.0 IBM SAN Volume Controller 6.4.1 9 IBM SAN Volume Controller 7.4 IBM SAN Volume Controller 7.3.0.5 IBM SAN Volume Controller 7.3 IBM SAN Volume Controller 7.2.0.8 IBM SAN Volume Controller 7.2.0.5 IBM SAN Volume Controller 7.2.0.3 IBM SAN Volume Controller 7.2 IBM SAN Volume Controller 7.1.0.7 IBM SAN Volume Controller 7.1.0.6 IBM SAN Volume Controller 7.1.0.5 IBM SAN Volume Controller 7.1 IBM SAN Volume Controller 6.4.1.8 IBM SAN Volume Controller 6.4.1.3 IBM SAN Volume Controller 6.4 IBM SAN Volume Controller 6.3 IBM SAN Volume Controller 6.2 IBM SAN Volume Controller 6.1 IBM SAN Volume Controller 4.3.1.7 IBM SAN Volume Controller 1.1 IBM Sametime Community Server 9 Limited Use IBM Sametime Community Server 9 HF1 IBM Sametime 9.0.0.1 IBM Sametime 9.0.0.0 IBM Sametime 8.5.2.1 IBM Sametime 8.5.2.0 IBM Real-time Compression Appliance 4.1.2.10 IBM Real-time Compression Appliance 3.9.1.11 IBM Real-time Compression Appliance 3.8.0.10 IBM Rational Software Architect for WebSphere Software 9.1.1 IBM Rational Software Architect for WebSphere Software 9.1 IBM Rational Software Architect 9.1.1 IBM Rational Software Architect 9.1 IBM Rational Insight 1.1.1 3 IBM Rational Insight 1.1.1 2 IBM Rational Insight 1.1.1 1 IBM Rational Insight 1.1.1 IBM Rational Insight 1.1.1.6 IBM Rational Insight 1.1.1.5 IBM Rational Insight 1.1.1.4 IBM Rational Insight 1.1 IBM Proventia Network Enterprise Scanner 2.3 IBM PredictiveInsight 9.0 IBM PredictiveInsight 8.6 IBM PredictiveInsight 8.5 IBM PredictiveInsight 8.3 IBM PredictiveInsight 8.2 IBM PredictiveInsight 8.1 IBM PredictiveInsight 8.0 IBM PredictiveInsight 7.0 IBM Open Systems SnapVault 3.0.1 IBM NS OnCommand Core Package 5.2.1 IBM NS OnCommand Core Package 5.2 IBM NS OnCommand Core Package 5.1.2 IBM NeXtScale nx360 M4 type 5455 0 IBM InfoSphere Balanced Warehouse C4000 IBM InfoSphere Balanced Warehouse C3000 IBM iDataPlex dx360 M4 Type 7913 0 IBM iDataPlex dx360 M4 Type 7912 0 IBM GPFS for Windows 3.5 IBM Flex System x880 Compute Node type 7903 0 IBM Flex System x880 Compute Node type 4259 0 IBM Flex System x440 Compute Node Type 7917 0 IBM Flex System x240 Compute Node type 8956 0 IBM Flex System x240 Compute Node Type 8738 0 IBM Flex System x240 Compute Node Type 8737 0 IBM Flex System x240 Compute Node Type 7863 0 IBM Flex System x222 Compute Node type 7916 0 IBM Flex System x220 Compute Node Type 7906 0 IBM Flex System x220 Compute Node Type 2585 0 IBM Flex System Manager Node Types 7955 0 IBM Flex System Manager Node 8734 - IBM Flex System Manager Node 8731 - IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.2 IBM Flex System Manager 1.2 IBM Flex System Manager 1.3.3.0 IBM Flex System Manager 1.3.1.0 IBM Flex System Manager 1.3.1 IBM Flex System Manager 1.3.0.1 IBM Flex System Manager 1.3.0.0 IBM Flex System Manager 1.3.0 IBM Flex System Manager 1.2.1.0 IBM Flex System Manager 1.2.0.0 IBM Flex System Manager 1.1.0.0 IBM FlashSystem V840 9848-AE1 IBM FlashSystem V840 9846-AE1 IBM FlashSystem 840 9840-AE1 IBM dx360 M4 Water Cooled type 7919 0 IBM dx360 M4 Water Cooled type 7918 0 IBM Data ONTAP SMI-S Agent 5.1.2 IBM Data ONTAP SMI-S Agent 5.2 IBM Data ONTAP operating in 7-Mode 8.2.3 IBM Data ONTAP operating in 7-Mode 8.2.2 IBM Data ONTAP operating in 7-Mode 8.2.1 IBM Data ONTAP operating in 7-Mode 8.1.4 IBM Data ONTAP operating in 7-Mode 7.3.7 IBM ContactOptimization 9.1.1 IBM ContactOptimization 9.1 IBM ContactOptimization 9.0 IBM ContactOptimization 8.6 IBM ContactOptimization 8.5 IBM ContactOptimization 8.3 IBM ContactOptimization 8.2 IBM ContactOptimization 8.1 IBM ContactOptimization 8.0 IBM ContactOptimization 7.6 IBM ContactOptimization 7.5 IBM ContactOptimization 7.4 IBM ContactOptimization 7.3 IBM ContactOptimization 7.2 IBM ContactOptimization 7.1 IBM ContactOptimization 7.0 IBM Cognos TM1 10.2.2 IBM Cognos TM1 9.5.2 IBM Cognos TM1 10.2.0.2 IBM Cognos TM1 10.1.1 IBM Cognos Controller 10.2.1 IBM Cognos Controller 10.1.1 IBM Cognos Controller 8.5.1 IBM Cognos Controller 8.5 IBM Cognos Controller 10.2 IBM Cognos Controller 10.1 IBM Clustered Data ONTAP Antivirus Connector 1.0.2 IBM Clustered Data ONTAP Antivirus Connector 1.0.1 IBM Clustered Data ONTAP Antivirus Connector 1.0 IBM Clustered Data ONTAP 8.2 IBM Campaign 9.1.1 IBM Campaign 9.1 1 IBM Campaign 9.1 0 IBM Campaign 9.1 IBM Campaign 9.1.0.4 IBM Campaign 9.1 IBM Campaign 9.0 IBM Campaign 8.6 IBM Campaign 8.5 IBM Campaign 8.3 IBM Campaign 8.2 IBM Campaign 8.1 IBM Campaign 8.0 IBM Campaign 7.6 IBM Campaign 7.5 IBM Campaign 7.4 IBM Campaign 7.3 IBM Campaign 7.2 IBM Campaign 7.1 IBM Campaign 7.0 IBM Business Process Manager Advanced 8.5.6 IBM Business Process Manager Advanced 8.5.5 IBM BladeCenter(TM)-T 8730 IBM BladeCenter(TM)-T 8720 IBM BladeCenter(TM)-S 8886 IBM BladeCenter(TM)-S 7779 IBM BladeCenter(TM)-S 1948 IBM BladeCenter(TM)-HT 8750 IBM BladeCenter(TM)-HT 8740 IBM BladeCenter(TM)-H 8852 IBM BladeCenter(TM)-H 7989 IBM BladeCenter(TM)-H 1886 IBM BladeCenter(TM)-E 8677 IBM BladeCenter(TM)-E 7967 IBM BladeCenter(TM)-E 1881 IBM BladeCenter T Advanced Management Module 32R0835 0 IBM BladeCenter Advanced Management Module 3.66K (BPET66K) IBM BladeCenter Advanced Management Module 3.66K (BPEO66K) IBM BladeCenter Advanced Management Module 3.66K (BBET66K) IBM BladeCenter Advanced Management Module 25R5778 HP Virtual Connect Enterprise Manager SDK 7.4.1 HP Virtual Connect Enterprise Manager SDK 7.4 HP Virtual Connect Enterprise Manager 6.2 HP Virtual Connect Enterprise Manager 6.1 HP Virtual Connect Enterprise Manager 6.1 HP Virtual Connect Enterprise Manager 6.0 HP Virtual Connect Enterprise Manager 6.0 HP Version Control Repository Manager 7.4.1 HP Version Control Repository Manager 7.4 HP Version Control Repository Manager 7.3.4 HP Version Control Repository Manager 7.3.1 HP Version Control Repository Manager 7.3 HP Version Control Repository Manager 7.2.2 HP Version Control Repository Manager 7.2.1 HP Version Control Repository Manager 7.2 HP Version Control Repository Manager 2.1.1 .730 HP Version Control Repository Manager 7.5.0 HP Version Control Repository Manager 7.4.0a HP Version Control Repository Manager 7.3.3 HP Version Control Repository Manager 7.3.2 HP Version Control Repository Manager 6.3.0.870 HP Version Control Repository Manager 6.2.0.860 HP Version Control Repository Manager 6.1.0.841 HP Version Control Repository Manager 6.0.0.840 HP Version Control Repository Manager 6.0.0.840 HP Version Control Repository Manager 2.2.2.835 HP Version Control Repository Manager 2.2.1.830 HP Version Control Repository Manager 2.2.0.820 HP Version Control Repository Manager 2.1.9.790 HP Version Control Repository Manager 2.1.8.780 HP Version Control Repository Manager 2.1.7.770 HP Version Control Repository Manager 2.1.5.760 HP Version Control Repository Manager 2.1.4.750 HP Version Control Repository Manager 2.1.3.740 HP Version Control Repository Manager 2.1.10.800 HP Version Control Agent 7.3.5 HP Version Control Agent 7.3.4 HP Version Control Agent 7.3.3 HP Version Control Agent 7.3.1 HP Version Control Agent 7.3 HP Version Control Agent 7.2.2 HP Version Control Agent 7.2.1 HP Version Control Agent 7.2 HP Version Control Agent 6.1 841 HP Version Control Agent 2.1.5 HP Version Control Agent 2.1.4 HP Version Control Agent 7.3.2 HP Version Control Agent 6.3.0.870 HP Version Control Agent 6.2.0.860 HP Version Control Agent 6.1.0.842 HP Version Control Agent 6.0.0.840 HP Version Control Agent 2.2.2.835 HP Version Control Agent 2.2.1.830 HP Version Control Agent 2.2.0.820 HP Version Control Agent 2.1.9.790 HP Version Control Agent 2.1.8.780 HP Version Control Agent 2.1.7.770 HP Version Control Agent 2.1.10.801 HP Version Control Agent 2.1.10.800 HP Version Control Agent 2.0 HP ThinPro Linux (x86) 5.1 HP ThinPro Linux (x86) 5.0 HP ThinPro Linux (x86) 4.4 HP ThinPro Linux (x86) 4.3 HP ThinPro Linux (x86) 4.2 HP ThinPro Linux (x86) 4.1 HP ThinPro Linux (ARM) 4.4 HP ThinPro Linux (ARM) 4.3 HP ThinPro Linux (ARM) 4.2 HP ThinPro Linux (ARM) 4.1 HP Systems Insight Manager 7.1.1 HP Systems Insight Manager 7.5.0 HP Systems Insight Manager 7.4.0a HP Systems Insight Manager 7.4 HP Systems Insight Manager 7.3.2 HP Systems Insight Manager 7.3.1 HP Systems Insight Manager 7.3.0a HP Systems Insight Manager 7.3 HP Systems Insight Manager 7.2.2 HP Systems Insight Manager 7.2.1 HP Systems Insight Manager 7.2 HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0.0.96 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 Update 1 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.2 SP2 HP Systems Insight Manager 5.1 SP1 HP Systems Insight Manager 5.0 SP6 HP Systems Insight Manager 5.0 SP5 HP Systems Insight Manager 5.0 SP3 HP Systems Insight Manager 5.0 SP2 HP Systems Insight Manager 5.0 SP1 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 SP2 HP Systems Insight Manager 4.2 SP1 HP Systems Insight Manager 4.2 HP System Management Homepage (SMH) 7.4 HP System Management Homepage 7.5.4 HP System Management Homepage 7.5 HP System Management Homepage 7.4.1 HP System Management Homepage 7.3.2 HP System Management Homepage 7.2.3 HP System Management Homepage 7.2.2 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1.2 HP System Management Homepage 7.1.1 HP System Management Homepage 6.2.2 7 HP System Management Homepage 6.0 .96 HP System Management Homepage 3.2.7 HP System Management Homepage 3.2.2 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0.1 .73 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.15 210 HP System Management Homepage 2.1.15 HP System Management Homepage 2.1.12 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 .132 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP System Management Homepage 7.4.0a HP System Management Homepage 7.4 HP System Management Homepage 7.3.3.1 HP System Management Homepage 7.3.2.1(B) HP System Management Homepage 7.3.1 HP System Management Homepage 7.3 HP System Management Homepage 7.2.4.1 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2.0-14 HP System Management Homepage 7.2 HP System Management Homepage 7.1 HP System Management Homepage 7.0 HP System Management Homepage 6.3.1 HP System Management Homepage 6.3.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2.0-12 HP System Management Homepage 6.2.0 HP System Management Homepage 6.2 HP System Management Homepage 6.2 HP System Management Homepage 6.1.0.103 HP System Management Homepage 6.1.0.102 HP System Management Homepage 6.1.0-103 HP System Management Homepage 6.1 HP System Management Homepage 6.0.0.95 HP System Management Homepage 6.0.0-95 HP System Management Homepage 6.0 HP System Management Homepage 3.2.2 HP System Management Homepage 3.0.2.77 B HP System Management Homepage 3.0.2-77 HP System Management Homepage 3.0.2 HP System Management Homepage 3.0.1-73 HP System Management Homepage 3.0.1 HP System Management Homepage 3.0.0-68 HP System Management Homepage 3.0.0 HP System Management Homepage 2.1.8.179 HP System Management Homepage 2.1.6.156 HP System Management Homepage 2.1.5.146 B HP System Management Homepage 2.1.5.146 HP System Management Homepage 2.1.4.143 HP System Management Homepage 2.1.2.127 HP System Management Homepage 2.1.15-210 HP System Management Homepage 2.1.14.20 HP System Management Homepage 2.1.14 HP System Management Homepage 2.1.12.201 HP System Management Homepage 2.1.11.197 A HP System Management Homepage 2.1.10.186 C HP System Management Homepage 2.1.10.186 B HP System Management Homepage 2.1.10.186 HP System Management Homepage 2.1.0.121 HP System Management Homepage 2.0.2.106 HP System Management Homepage 2.0.1.104 HP Server Migration Pack 7.5 HP Matrix Operating Environment 7.5 HP Matrix Operating Environment 7.4 HP Matrix Operating Environment 7.3.2 HP Matrix Operating Environment 7.3.1 HP Matrix Operating Environment 7.3 HP Matrix Operating Environment 7.2.2 HP Matrix Operating Environment 7.2.1 HP Matrix Operating Environment 7.2 HP Insight Orchestration 6.2 HP Insight Orchestration 6.1 HP Insight Orchestration 6.0 HP Insight Control server provisioning 7.4.1 HP Insight Control server provisioning 7.5.0 HP Insight Control server provisioning 7.4.0 HP Insight Control 7.5 HP Insight Control 7.4 HP Insight Control 7.3 HP Insight Control 7.2 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler T1 0 Citrix NetScaler Service Delivery Appliance 0 Citrix NetScaler Gateway 0 Citrix NetScaler Application Delivery Controller (ADC) 0 Citrix Command Center Appliance 0 Citrix CloudBridge 0 Cisco Wireless Lan Controller (WLC) 0 Cisco Wide Area Application Services (WAAS) 0 Cisco WebEx Meetings Server 2.5MR2 Cisco WebEx Meetings for Android 0 Cisco Web Security Appliance (WSA) 9.0.0(Elbrus)-FCS Cisco WAG310G Residential Gateway 0 Cisco Virtualization Experience Media Engine 0 Cisco Video Surveillance PTZ IP Cameras 0 Cisco Video Surveillance Media Server 7.7 Cisco Video Surveillance 7000 Series IP Cameras 0 Cisco Video Surveillance 6000 Series IP Cameras 0 Cisco Video Surveillance 4300E/4500E High-Definition IP Cameras 0 Cisco Video Surveillance 3000 Series IP Cameras 0 Cisco VDS Service Broker 0 Cisco Unified SIP Proxy 0 Cisco Unified IP Conference Phone 8831 0 Cisco Unified Communications Domain Manager 10.1.2 Cisco Unified Attendant Console Premium Edition 0 Cisco Unified Attendant Console Enterprise Edition 0 Cisco Unified Attendant Console Department Edition 0 Cisco Unified Attendant Console Business Edition 0 Cisco Unified Attendant Console Advanced 0 Cisco UCS Central 0 Cisco TelePresence Video Communication Server (VCS) 0 Cisco TelePresence TE Software (for E20 - EoL) 0 Cisco TelePresence SX Series 0 Cisco TelePresence Supervisor MSE 8050 0 Cisco TelePresence Server on Virtual Machine 4.1 Cisco TelePresence Server on Multiparty Media 320 4.1 Cisco TelePresence Server on Multiparty Media 310 4.1 Cisco TelePresence Server 8710 4.1 Cisco Telepresence Server 7010 4.1 Cisco TelePresence Serial Gateway Series 0 Cisco TelePresence Profile Series 0 Cisco TelePresence MX Series 0 Cisco TelePresence MCU 8510 0 Cisco TelePresence MCU 8420 0 Cisco TelePresence MCU 5300 0 Cisco TelePresence MCU 4500 0 Cisco TelePresence MCU 4200 0 Cisco TelePresence ISDN GW MSE 8321 0 Cisco TelePresence ISDN GW 3241 0 Cisco TelePresence Integrator C Series 0 Cisco TelePresence EX Series 0 Cisco TelePresence Content Server (TCS) 0 Cisco TelePresence Conductor 0 Cisco TelePresence Advanced Media Gateway Series 0 Cisco Tandberg Codian MSE 8320 model 0 Cisco Tandberg Codian ISDN GW 3240 0 Cisco Tandberg Codian ISDN GW 3220 0 Cisco Tandberg Codian ISDN GW 3210 0 Cisco SocialMiner 0 Cisco Proactive Network Operations Center 0 Cisco Prime Security Manager (PRSM) 04.8(00)QA08 Cisco Prime Performance Manager for SPs PPM 1.6 SP1 Cisco Prime Network Registrar 8.3 Cisco Prime Network Registrar 8.2.2.2 Cisco Prime Network Registrar 8.1.3.3 Cisco Prime License Manager 0 Cisco Prime LAN Management Solution 0 Cisco Prime Data Center Network Manager 0 Cisco Prime Collaboration Provisioning 0 Cisco Prime Collaboration Deployment 0 Cisco Prime Collaboration Assurance 0 Cisco PowerVu D9190 Conditional Access Manager (PCAM) 0 Cisco Physical Access Gateway 0 Cisco Paging Server (Informacast) 0 Cisco Paging Server 0 Cisco OpenFlow Agent 0 Cisco OnePK All-in-One VM 0 Cisco Nexus 9000 Series Switches 0 Cisco Nexus 3500 Series Switches 0 Cisco Network Performance Analytics (NPA) 0 Cisco Network Configuration and Change Management Service 0 Cisco Nac Guest Server 0 Cisco Mobile Wireless transport Manager (MWTM) 0 Cisco MeetingPlace 0 Cisco Media Services Interface 0 Cisco MATE Live 0 Cisco MATE Design 0 Cisco MATE collector 0 Cisco Local Collector Appliance (LCA) 2.2.8 Cisco Jabber Voice for Android 0 Cisco Jabber Video for TelePresence (Movi) 0 Cisco Jabber Software Development Kit 0 Cisco Jabber for Android 0 Cisco IPTV 0 Cisco IP Interoperability and Collaboration System (IPICS) 0 Cisco Ios 15.5(3)S Cisco IM and Presence Service (CUPS) 0 Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 0 Cisco FireSIGHT System Software 5.4.1.2 Cisco FireSIGHT System Software 5.4.0.2 Cisco Expressway series 0 Cisco Enterprise Content Delivery Service 0 Cisco Emergency Responder 0 Cisco Email Security Appliance (ESA) 7.6 Cisco Edge 340 Digital Media Player 0 Cisco Edge 300 Digital Media Player 0 Cisco DX Series IP Phones 0 Cisco D9036 Modular Encoding Platform 0 Cisco Cloud Object Store (COS) 0 Cisco Cisco Unified Computing System B-Series (Blade) Servers 0 Cisco Cisco Identity Service Engine (ISE) 0 Cisco Cisco Application Policy Infrastructure Controller 1.1(0.625) Cisco Cisco Application Policy Infrastructure Controller 1.0(2.136a) Cisco Application Networking Manager (ANM) 0 Cisco AnyRes Live (CAL) 0 Cisco AnyConnect Secure Mobility Client for iOS 004.000(1233) Cisco Agent Desktop 10.0(2) Cisco Adaptive Security Appliance (ASA) Software 9.2(3.1) Cisco Adaptive Security Appliance (ASA) Software 9.1(5.106) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.29) Cisco Adaptive Security Appliance (ASA) Software 8.4(7.26) Cisco ACE30 Application Control Engine Module 3.0(0)A5(3.1.15) Cisco 190 ATA Series Analog Terminal Adaptor 0 Apple Mac OS X 10.9.5 Apple Mac OS X 10.8.5 Apple Mac OS X 10.10.2 Apple Mac OS X 10.10.1 Apple Mac OS X 10.10 |
| Not Vulnerable: |
OpenSSL Project OpenSSL 1.0.1k OpenSSL Project OpenSSL 1.0.0p OpenSSL Project OpenSSL 0.9.8zd Juniper Junos OS 13.3R6 Juniper Junos OS 13.2R8 Juniper Junos OS 12.3X48-D10 Juniper Junos OS 12.3R10 Juniper CTPView 7.1r1 Juniper CTPOS 7.1r1 Juniper CTPOS 7.0r4 Juniper CTPOS 6.6R5 IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.3 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.3 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.3 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.3 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.3 IBM Cognos Controller 10.2.1 FP1 IBM Cognos Controller 10.2.0.1 Interim Fix IBM Cognos Controller 10.1.1.3 IF1 IBM Cognos Controller 10.1 IF3 HP Version Control Repository Manager 7.5.1 HP Systems Insight Manager 7.5.1 HP System Management Homepage (SMH) 7.5 HP System Management Homepage 7.5.5 HP Server Migration Pack 7.5.1 HP Matrix Operating Environment 7.5.1 HP Insight Control server provisioning 7.5.1 HP Insight Control 7.5.1 Apple Mac Os X 10.10.3 |
Discussion
OpenSSL 'ssl23_get_client_hello()' Function NULL Pointer Dereference Denial of Service Vulnerability
OpenSSL is prone to denial-of-service vulnerability due to a NULL pointer dereference error.
An attacker may exploit this issue to crash the application, resulting in denial-of-service conditions.
OpenSSL is prone to denial-of-service vulnerability due to a NULL pointer dereference error.
An attacker may exploit this issue to crash the application, resulting in denial-of-service conditions.
Exploit / POC
OpenSSL 'ssl23_get_client_hello()' Function NULL Pointer Dereference Denial of Service Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
OpenSSL 'ssl23_get_client_hello()' Function NULL Pointer Dereference Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenSSL 'ssl23_get_client_hello()' Function NULL Pointer Dereference Denial of Service Vulnerability
References:
References:
- OpenSSL Homepage (OpenSSL)
- Splunk response to January 2015 OpenSSL vulnerabilities (Splunk)
- Vulnerabilities in OpenSSL affect IBM Security Network Enterprise Scanner (CVE- (IBM)
- [security bulletin] HPSBUX03244 SSRT101885 rev.2 - HP-UX Running OpenSSL, Remote (Seclist.org)
- 2015-04 Security Bulletin: OpenSSL 8th January 2015 advisory. (Juniper)
- cpujul2016: Oracle Critical Patch Update Advisory - July 2016 (Oracle)
- CTX216642 Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Li (Citrix)
- HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabiliti (HP)
- HPSBHF03289 rev.1- HP ThinClient PCs running ThinPro Linux, Remote Code Executio (HP)
- HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and (HP)
- HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multipl (HP)
- HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities (hp)
- HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerab (HP)
- HPSBMU03611 rev.1 - HPE Matrix Operating Environment on Windows and Linux, Multi (HP)
- HPSBMU03612 rev.1 - HPE Insight Control on Windows and Linux, Multiple Remote Vu (HP)
- IBM Cognos Controller is affected by multiple vulnerabilities (IBM)
- Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products (Cisco)
- Multiple Vulnerabilities in OpenSSL affect Tivoli Workload Scheduler (IBM)
- OpenSSL Security Advisory [08 Jan 2015] (OpenSSL)
- OpenSSL vulnerabilities (OpenSSL)
- Oracle Critical Patch Update Advisory - April 2015 (Oracle)
- Security Bulletin: Multiple Security Issues in IBM Media Server Due to OpenSSL I (IBM)
- Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Ma (IBM)
- Security Bulletin: Multiple vulnerability in Product IBM Tivoli Common Reporting (IBM)
- Security Bulletin: Real-time Compression Appliance 13 8 issues for openssl, inc (IBM)
- Security Bulletin: Tivoli Provisioning Manager for OS Deployment and Tivoli Prov (IBM)
- Security Bulletin: Vulnerabilities in IBM SDK for Node.js affect IBM Business Pr (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect FlashSystem 840, (CVE-2015- (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM BladeCenter Advanced Ma (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Campaign, IBM ContactOp (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos TM1 including a (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System Manager (FS (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Balanced War (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Access Manager (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Tivoli Netcool/Reporter (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect Integrated Management Modul (IBM)
- Security Bulletin: Vulnerabilities OpenSSL affect SAN Volume Controller and Stor (IBM)
- ssg1S1009328:January 2015 OpenSSL security vulnerabilities in Multiple IBM N Ser (IBM)
- swg21959633 Security Bulletin: Vulnerabilities in OpenSSL affect IBM PredictiveI (IBM)
- Vulnerabilities in OpenSSL affect GPFS V3.5 for Windows (CVE-2014-3569, CVE-2014 (IBM)
- Vulnerabilities in OpenSSL affect IBM Service Delivery Manager. OpenSSL is insta (IBM)
- Vulnerabilities in OpenSSL affect IBM Upward Integration Modules (CVE-2015-0204, (IBM)
- Vulnerabilities in OpenSSL affect Rational Insight (CVE-2014-3569, CVE-2014-3570 (IBM)
- Vulnerabilities in OpenSSL affects Rational Software Architect and Rational Soft (IBM)