OpenSSL 'dtls1_get_record()' Function NULL Pointer Dereference Denial of Service Vulnerability
BID:71937
Info
OpenSSL 'dtls1_get_record()' Function NULL Pointer Dereference Denial of Service Vulnerability
| Bugtraq ID: | 71937 |
| Class: | Design Error |
| CVE: |
CVE-2014-3571 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 22 2014 12:00AM |
| Updated: | May 02 2017 04:07AM |
| Credit: | Markus Stenberg of Cisco Systems, Inc. |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise Server for VMware 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 Splunk MINT 0 Splunk Cloud 0 Splunk App for VMware 0 Splunk App for Stream 0 Splunk App for NetApp Data ONTAP 0 Pexip AS Infinity 8 Pexip AS Infinity 7 Pexip AS Infinity 6 Pexip AS Infinity 5 Pexip AS Infinity 4 Pexip AS Infinity 3 Pexip AS Infinity 2 Pexip AS Infinity 1 Oracle Tuxedo 12.1.1.0 Oracle Transportation Management 6.2 Oracle Transportation Management 6.1 Oracle Secure Global Desktop 5.1 Oracle Secure Global Desktop 4.71 Oracle Secure Global Desktop 4.63 Oracle Retail Predictive Application Server 16.0 Oracle Retail Predictive Application Server 15.0.2 Oracle Retail Predictive Application Server 14.1.3 Oracle Retail Predictive Application Server 14.0.3 Oracle Retail Predictive Application Server 13.4.3 Oracle Retail Predictive Application Server 13.3.3 Oracle MySQL Server 5.6.22 Oracle MySQL Server 5.6.21 Oracle MySQL Server 5.6.16 Oracle MySQL Server 5.6.15 Oracle MySQL Server 5.6 Oracle Mobile Security Suite MSS 3.0 Oracle Integrated Lights Out Manager Firmware 3.2.3 Oracle Fujitsu M10-4S Server XCP 2230 Oracle Fujitsu M10-4 Server XCP 2230 Oracle Fujitsu M10-1 Server XCP 2230 Oracle Exalogic Infrastructure 2.0 Oracle Exalogic Infrastructure 1.0 Oracle Enterprise Session Border Controller Ecz7.3m2p2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Oracle Enterprise Communications Broker Pcz2.0.0m4p5 Oracle E-Business Suite 11.5.10.2 Oracle Communications Session Border Controller SCZ7.4.0 Oracle Communications Session Border Controller SCZ7.3.0 Oracle Communications Security Gateway 3.0 Oracle Communications Policy Management 12.1.1 Oracle Communications Policy Management 10.4.1 Oracle Communications Policy Management 9.9.1 Oracle Communications Policy Management 9.7.3 Oracle Communications Core Session Manager 7.3.5 Oracle Communications Core Session Manager 7.2.5 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 1.0.1j OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1b OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0o OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0m OpenSSL Project OpenSSL 1.0.0L OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0H OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 0.9.8zc OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8za OpenSSL Project OpenSSL 0.9.8y OpenSSL Project OpenSSL 0.9.8X OpenSSL Project OpenSSL 0.9.8w OpenSSL Project OpenSSL 0.9.8U OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8 f OpenSSL Project OpenSSL 0.9.8v Mandriva Business Server 1 X86 64 Mandriva Business Server 1 IBM Workflow for Bluemix 0 IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.2 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.2 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5 IBM Tivoli Provisioning Manager for OS Deployment 5.1 .3 IBM Tivoli Provisioning Manager for OS Deployment 5.1 .116 IBM Tivoli Provisioning Manager for OS Deployment 5.1 IBM Tivoli Provisioning Manager for OS Deployment 7.1.1 IBM Tivoli Provisioning Manager for OS Deployment 5.1.0.2 IBM Tivoli Provisioning Manager for Images System x Edition 7.1.1.0 IBM Tivoli Provisioning Manager for Images 7.1.1.0 IBM Tivoli Netcool/Reporter 2.2 IBM Tivoli Common Reporting 2.1.1 IBM Tivoli Common Reporting 3.1.0.2 IBM Tivoli Common Reporting 3.1.0.1 IBM Tivoli Common Reporting 3.1 IBM Tivoli Common Reporting 2.1.1.2 IBM Tivoli Common Reporting 2.1 IBM System x3950 X6 Type 3837 0 IBM System x3850 X6 Type 3837 0 IBM System x3750 M4 Type 8752 0 IBM System x3750 M4 Type 8733 0 IBM System x3750 M4 Type 8722 0 IBM System x3750 M4 Type 8718 0 IBM System x3650 M4 Type 7915 0 IBM System x3650 M4 HD type 5460 0 IBM System x3650 M4 BD type 5466 0 IBM System x3630 M4 Type 7158 0 IBM System x3550 M4 Type 7914 0 IBM System x3530 M4 Type 7160 0 IBM System x3500 M4 Type 7383 0 IBM System x3300 M4 Type 7382 0 IBM System x3250 M5 type 5458 0 IBM System x3250 M4 Type 2583 0 IBM System x3100 M5 type 5457 0 IBM System x3100 M4 Type 2582 0 IBM SnapDrive for Windows 7.1.1 IBM SnapDrive for Unix 5.2.2 IBM Smart Analytics System 5710 0 IBM Smart Analytics System 2050 0 IBM Smart Analytics System 1050 0 IBM Service Delivery Manager 7.2.4 IBM Service Delivery Manager 7.2.2 IBM Service Delivery Manager 7.2.1 IBM Real-time Compression Appliance 4.1.2.10 IBM Real-time Compression Appliance 3.9.1.11 IBM Real-time Compression Appliance 3.8.0.10 IBM Rational Software Architect for WebSphere Software 9.1.1 IBM Rational Software Architect for WebSphere Software 9.1 IBM Rational Software Architect 9.1.1 IBM Rational Software Architect 9.1 IBM Rational Insight 1.1.1 3 IBM Rational Insight 1.1.1 2 IBM Rational Insight 1.1.1 1 IBM Rational Insight 1.1.1 IBM Rational Insight 1.1.1.6 IBM Rational Insight 1.1.1.5 IBM Rational Insight 1.1.1.4 IBM Rational Insight 1.1 IBM Proventia Network Enterprise Scanner 2.3 IBM OpenSSH for GPFS 3.5 IBM Open Systems SnapVault 3.0.1 IBM NS OnCommand Core Package 5.2.1 IBM NS OnCommand Core Package 5.2 IBM NS OnCommand Core Package 5.1.2 IBM NeXtScale nx360 M4 type 5455 0 IBM InfoSphere Balanced Warehouse C4000 IBM InfoSphere Balanced Warehouse C3000 IBM iDataPlex dx360 M4 Type 7913 0 IBM iDataPlex dx360 M4 Type 7912 0 IBM Flex System x880 Compute Node type 7903 0 IBM Flex System x880 Compute Node type 4259 0 IBM Flex System x440 Compute Node Type 7917 0 IBM Flex System x240 Compute Node type 8956 0 IBM Flex System x240 Compute Node Type 8738 0 IBM Flex System x240 Compute Node Type 8737 0 IBM Flex System x240 Compute Node Type 7863 0 IBM Flex System x222 Compute Node type 7916 0 IBM Flex System x220 Compute Node Type 7906 0 IBM Flex System x220 Compute Node Type 2585 0 IBM Flex System Manager Node Types 7955 0 IBM Flex System Manager Node 8734 - IBM Flex System Manager Node 8731 - IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.2 IBM Flex System Manager 1.2.1 IBM Flex System Manager 1.2 IBM Flex System Manager 1.3.3.0 IBM Flex System Manager 1.3.1.0 IBM Flex System Manager 1.3.1 IBM Flex System Manager 1.3.0.1 IBM Flex System Manager 1.3.0.0 IBM Flex System Manager 1.2.1.0 IBM Flex System Manager 1.2.0.0 IBM Flex System Manager 1.1.0.0 IBM FileNet System Monitor 4.5 IBM Enterprise Content Management System Monitor 5.2 IBM Enterprise Content Management System Monitor 5.1 IBM dx360 M4 Water Cooled type 7919 0 IBM dx360 M4 Water Cooled type 7918 0 IBM Data ONTAP SMI-S Agent 5.1.2 IBM Data ONTAP SMI-S Agent 5.2 IBM Data ONTAP operating in 7-Mode 8.2.3 IBM Data ONTAP operating in 7-Mode 8.2.2 IBM Data ONTAP operating in 7-Mode 8.2.1 IBM Data ONTAP operating in 7-Mode 8.1.4 IBM Data ONTAP operating in 7-Mode 7.3.7 IBM Cognos Planning 10.1.1 IBM Cognos Planning 10.1 IBM Cognos Controller 10.2.1 IBM Cognos Controller 10.1.1 IBM Cognos Controller 8.5.1 IBM Cognos Controller 8.5 IBM Cognos Controller 10.2 IBM Cognos Controller 10.1 IBM Cognos Business Intelligence Server 10.2.2 IBM Cognos Business Intelligence Server 10.2.1 1 IBM Cognos Business Intelligence Server 10.2.1 IBM Cognos Business Intelligence Server 10.1.1 IBM Cognos Business Intelligence Server 8.4.1 IBM Cognos Business Intelligence Server 10.2 IBM Cognos Business Intelligence Server 10.1 IBM Clustered Data ONTAP Antivirus Connector 1.0.2 IBM Clustered Data ONTAP Antivirus Connector 1.0.1 IBM Clustered Data ONTAP Antivirus Connector 1.0 IBM Clustered Data ONTAP 8.2 IBM Business Process Manager Advanced 8.5.6 IBM Business Process Manager Advanced 8.5.5 IBM BladeCenter(TM)-T 8730 IBM BladeCenter(TM)-T 8720 IBM BladeCenter(TM)-S 8886 IBM BladeCenter(TM)-S 7779 IBM BladeCenter(TM)-S 1948 IBM BladeCenter(TM)-HT 8750 IBM BladeCenter(TM)-HT 8740 IBM BladeCenter(TM)-H 8852 IBM BladeCenter(TM)-H 7989 IBM BladeCenter(TM)-H 1886 IBM BladeCenter(TM)-E 8677 IBM BladeCenter(TM)-E 7967 IBM BladeCenter(TM)-E 1881 IBM BladeCenter T Advanced Management Module 32R0835 IBM BladeCenter Advanced Management Module 25R5778 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 HP Virtual Connect Enterprise Manager SDK 7.4.1 HP Virtual Connect Enterprise Manager SDK 7.4 HP Virtual Connect Enterprise Manager 6.2 HP Virtual Connect Enterprise Manager 6.1 HP Virtual Connect Enterprise Manager 6.1 HP Virtual Connect Enterprise Manager 6.0 HP Virtual Connect Enterprise Manager 6.0 HP Version Control Repository Manager 7.4.1 HP Version Control Repository Manager 7.4 HP Version Control Repository Manager 7.3.4 HP Version Control Repository Manager 7.3.1 HP Version Control Repository Manager 7.3 HP Version Control Repository Manager 7.2.2 HP Version Control Repository Manager 7.2.1 HP Version Control Repository Manager 7.2 HP Version Control Repository Manager 2.1.1 .730 HP Version Control Repository Manager 7.4.0a HP Version Control Repository Manager 7.3.3 HP Version Control Repository Manager 7.3.2 HP Version Control Repository Manager 6.3.0.870 HP Version Control Repository Manager 6.2.0.860 HP Version Control Repository Manager 6.1.0.841 HP Version Control Repository Manager 6.0.0.840 HP Version Control Repository Manager 6.0.0.840 HP Version Control Repository Manager 2.2.2.835 HP Version Control Repository Manager 2.2.1.830 HP Version Control Repository Manager 2.2.0.820 HP Version Control Repository Manager 2.1.9.790 HP Version Control Repository Manager 2.1.8.780 HP Version Control Repository Manager 2.1.7.770 HP Version Control Repository Manager 2.1.5.760 HP Version Control Repository Manager 2.1.4.750 HP Version Control Repository Manager 2.1.3.740 HP Version Control Repository Manager 2.1.10.800 HP Version Control Agent 7.3.5 HP Version Control Agent 7.3.4 HP Version Control Agent 7.3.3 HP Version Control Agent 7.3.1 HP Version Control Agent 7.3 HP Version Control Agent 7.2.2 HP Version Control Agent 7.2.1 HP Version Control Agent 7.2 HP Version Control Agent 6.1 841 HP Version Control Agent 2.1.5 HP Version Control Agent 2.1.4 HP Version Control Agent 7.3.2 HP Version Control Agent 6.3.0.870 HP Version Control Agent 6.2.0.860 HP Version Control Agent 6.1.0.842 HP Version Control Agent 6.0.0.840 HP Version Control Agent 2.2.2.835 HP Version Control Agent 2.2.1.830 HP Version Control Agent 2.2.0.820 HP Version Control Agent 2.1.9.790 HP Version Control Agent 2.1.8.780 HP Version Control Agent 2.1.7.770 HP Version Control Agent 2.1.10.801 HP Version Control Agent 2.1.10.800 HP Version Control Agent 2.0 HP ThinPro Linux (x86) 5.1 HP ThinPro Linux (x86) 5.0 HP ThinPro Linux (x86) 4.4 HP ThinPro Linux (x86) 4.3 HP ThinPro Linux (x86) 4.2 HP ThinPro Linux (x86) 4.1 HP ThinPro Linux (ARM) 4.4 HP ThinPro Linux (ARM) 4.3 HP ThinPro Linux (ARM) 4.2 HP ThinPro Linux (ARM) 4.1 HP Systems Insight Manager 7.1.1 HP Systems Insight Manager 7.4.0a HP Systems Insight Manager 7.4 HP Systems Insight Manager 7.3.2 HP Systems Insight Manager 7.3.1 HP Systems Insight Manager 7.3.0a HP Systems Insight Manager 7.3 HP Systems Insight Manager 7.2.2 HP Systems Insight Manager 7.2.1 HP Systems Insight Manager 7.2 HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0.0.96 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 Update 1 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.2 SP2 HP Systems Insight Manager 5.1 SP1 HP Systems Insight Manager 5.0 SP6 HP Systems Insight Manager 5.0 SP5 HP Systems Insight Manager 5.0 SP3 HP Systems Insight Manager 5.0 SP2 HP Systems Insight Manager 5.0 SP1 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 SP2 HP Systems Insight Manager 4.2 SP1 HP Systems Insight Manager 4.2 HP System Management Homepage (SMH) 7.4 HP System Management Homepage 7.4.1 HP System Management Homepage 7.3.2 HP System Management Homepage 7.2.3 HP System Management Homepage 7.2.2 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1.2 HP System Management Homepage 7.1.1 HP System Management Homepage 6.2.2 7 HP System Management Homepage 6.0 .96 HP System Management Homepage 3.2.7 HP System Management Homepage 3.2.2 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0.1 .73 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.15 210 HP System Management Homepage 2.1.15 HP System Management Homepage 2.1.12 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 .132 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP System Management Homepage 7.4.0a HP System Management Homepage 7.4 HP System Management Homepage 7.3.3.1 HP System Management Homepage 7.3.2.1(B) HP System Management Homepage 7.3.1 HP System Management Homepage 7.3 HP System Management Homepage 7.2.4.1 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2.0-14 HP System Management Homepage 7.2 HP System Management Homepage 7.1 HP System Management Homepage 7.0 HP System Management Homepage 6.3.1 HP System Management Homepage 6.3.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2.0-12 HP System Management Homepage 6.2.0 HP System Management Homepage 6.2 HP System Management Homepage 6.2 HP System Management Homepage 6.1.0.103 HP System Management Homepage 6.1.0.102 HP System Management Homepage 6.1.0-103 HP System Management Homepage 6.1 HP System Management Homepage 6.0.0.95 HP System Management Homepage 6.0.0-95 HP System Management Homepage 6.0 HP System Management Homepage 3.2.2 HP System Management Homepage 3.0.2.77 B HP System Management Homepage 3.0.2-77 HP System Management Homepage 3.0.2 HP System Management Homepage 3.0.1-73 HP System Management Homepage 3.0.1 HP System Management Homepage 3.0.0-68 HP System Management Homepage 3.0.0 HP System Management Homepage 2.1.8.179 HP System Management Homepage 2.1.6.156 HP System Management Homepage 2.1.5.146 B HP System Management Homepage 2.1.5.146 HP System Management Homepage 2.1.4.143 HP System Management Homepage 2.1.2.127 HP System Management Homepage 2.1.15-210 HP System Management Homepage 2.1.14.20 HP System Management Homepage 2.1.14 HP System Management Homepage 2.1.12.201 HP System Management Homepage 2.1.11.197 A HP System Management Homepage 2.1.10.186 C HP System Management Homepage 2.1.10.186 B HP System Management Homepage 2.1.10.186 HP System Management Homepage 2.1.0.121 HP System Management Homepage 2.0.2.106 HP System Management Homepage 2.0.1.104 HP Insight Orchestration 6.2 HP Insight Orchestration 6.1 HP Insight Orchestration 6.0 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Cisco Wireless Lan Controller (WLC) 0 Cisco Wide Area Application Services (WAAS) 0 Cisco WebEx Meetings Server 2.5MR2 Cisco WebEx Meetings for Android 0 Cisco Web Security Appliance (WSA) 9.0.0(Elbrus)-FCS Cisco WAG310G Residential Gateway 0 Cisco Virtualization Experience Media Engine 0 Cisco Video Surveillance PTZ IP Cameras 0 Cisco Video Surveillance Media Server 7.7 Cisco Video Surveillance 7000 Series IP Cameras 0 Cisco Video Surveillance 6000 Series IP Cameras 0 Cisco Video Surveillance 4300E/4500E High-Definition IP Cameras 0 Cisco Video Surveillance 3000 Series IP Cameras 0 Cisco VDS Service Broker 0 Cisco Unified SIP Proxy 0 Cisco Unified IP Conference Phone 8831 0 Cisco Unified Communications Domain Manager 10.1.2 Cisco Unified Attendant Console Premium Edition 0 Cisco Unified Attendant Console Enterprise Edition 0 Cisco Unified Attendant Console Department Edition 0 Cisco Unified Attendant Console Business Edition 0 Cisco Unified Attendant Console Advanced 0 Cisco UCS Central 0 Cisco TelePresence Video Communication Server (VCS) 0 Cisco TelePresence TE Software (for E20 - EoL) 0 Cisco TelePresence SX Series 0 Cisco TelePresence Supervisor MSE 8050 0 Cisco TelePresence Server on Virtual Machine 4.1 Cisco TelePresence Server on Multiparty Media 320 4.1 Cisco TelePresence Server on Multiparty Media 310 4.1 Cisco TelePresence Server 8710 4.1 Cisco Telepresence Server 7010 4.1 Cisco TelePresence Serial Gateway Series 0 Cisco TelePresence Profile Series 0 Cisco TelePresence MX Series 0 Cisco TelePresence MCU 8510 0 Cisco TelePresence MCU 8420 0 Cisco TelePresence MCU 5300 0 Cisco TelePresence MCU 4500 0 Cisco TelePresence MCU 4200 0 Cisco TelePresence ISDN GW MSE 8321 0 Cisco TelePresence ISDN GW 3241 0 Cisco TelePresence Integrator C Series 0 Cisco TelePresence EX Series 0 Cisco TelePresence Content Server (TCS) 0 Cisco TelePresence Conductor 0 Cisco TelePresence Advanced Media Gateway Series 0 Cisco Tandberg Codian MSE 8320 model 0 Cisco Tandberg Codian ISDN GW 3240 0 Cisco Tandberg Codian ISDN GW 3220 0 Cisco Tandberg Codian ISDN GW 3210 0 Cisco SocialMiner 0 Cisco Proactive Network Operations Center 0 Cisco Prime Security Manager (PRSM) 04.8(00)QA08 Cisco Prime Performance Manager for SPs PPM 1.6 SP1 Cisco Prime Network Registrar 8.3 Cisco Prime Network Registrar 8.2.2.2 Cisco Prime Network Registrar 8.1.3.3 Cisco Prime License Manager 0 Cisco Prime LAN Management Solution 0 Cisco Prime Data Center Network Manager 0 Cisco Prime Collaboration Provisioning 0 Cisco Prime Collaboration Deployment 0 Cisco Prime Collaboration Assurance 0 Cisco PowerVu D9190 Conditional Access Manager (PCAM) 0 Cisco Physical Access Gateway 0 Cisco Paging Server (Informacast) 0 Cisco Paging Server 0 Cisco OnePK All-in-One VM 0 Cisco Nexus 9000 Series Switches 0 Cisco Nexus 3500 Series Switches 0 Cisco Network Performance Analytics (NPA) 0 Cisco Network Configuration and Change Management Service 0 Cisco Nac Guest Server 0 Cisco Mobile Wireless transport Manager (MWTM) 0 Cisco MeetingPlace 0 Cisco Media Services Interface 0 Cisco MATE Live 0 Cisco MATE Design 0 Cisco MATE collector 0 Cisco Local Collector Appliance (LCA) 2.2.8 Cisco Jabber Video for TelePresence (Movi) 0 Cisco Jabber Software Development Kit 0 Cisco Jabber for Android 0 Cisco IPTV 0 Cisco IP Interoperability and Collaboration System (IPICS) 0 Cisco Ios 15.5(3)S Cisco IM and Presence Service (CUPS) 0 Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 0 Cisco FireSIGHT System Software 5.4.1.2 Cisco FireSIGHT System Software 5.4.0.2 Cisco Expressway series 0 Cisco Enterprise Content Delivery Service 0 Cisco Emergency Responder 0 Cisco Email Security Appliance (ESA) 7.6 Cisco Edge 340 Digital Media Player 0 Cisco Edge 300 Digital Media Player 0 Cisco DX Series IP Phones 0 Cisco D9036 Modular Encoding Platform 0 Cisco Cloud Object Store (COS) 0 Cisco Cisco Unified Computing System B-Series (Blade) Servers 0 Cisco Cisco Identity Service Engine (ISE) 0 Cisco Cisco Application Policy Infrastructure Controller 1.1(0.625) Cisco Cisco Application Policy Infrastructure Controller 1.0(2.136a) Cisco Application Networking Manager (ANM) 0 Cisco AnyRes Live (CAL) 0 Cisco AnyConnect Secure Mobility Client for iOS 004.000(1233) Cisco Agent Desktop 10.0(2) Cisco Adaptive Security Appliance (ASA) Software 9.2(3.1) Cisco Adaptive Security Appliance (ASA) Software 9.1(5.106) Cisco Adaptive Security Appliance (ASA) Software 9.0(4.29) Cisco Adaptive Security Appliance (ASA) Software 8.4(7.26) Cisco ACE30 Application Control Engine Module 3.0(0)A5(3.1.15) Cisco 190 ATA Series Analog Terminal Adaptor 0 CentOS CentOS 6 CentOS CentOS 5 Avaya Session Border Controller for Enterprise 6.3.0 Avaya one-X Client Enablement Services 6.2 SP2 Avaya one-X Client Enablement Services 6.2 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Server Edition 8.0 Avaya IP Office Application Server 9.0 Avaya CMS R17 R4 Avaya CMS R17 R3 Avaya CMS r17 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.3.3 Avaya Aura Session Manager 6.3 Avaya Aura Experience Portal 6.0.2 Avaya Aura Experience Portal 6.0.1 Avaya Aura Experience Portal 7.0 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 8.0 Avaya Aura Collaboration Environment 3.0 Avaya Aura Collaboration Environment 2.0 Apple Mac OS X 10.9.5 Apple Mac OS X 10.8.5 Apple Mac OS X 10.10.2 Apple Mac OS X 10.10.1 Apple Mac OS X 10.10 AlienVault AlienVault 4.15 AlienVault AlienVault 4.13 AlienVault AlienVault 4.12.1 AlienVault AlienVault 4.12 |
| Not Vulnerable: |
Pexip AS Infinity 8.1 OpenSSL Project OpenSSL 1.0.1k OpenSSL Project OpenSSL 1.0.0p OpenSSL Project OpenSSL 0.9.8zd IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.3 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.3 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.3 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.3 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.3 IBM Initiate Master Data Service Provider Hub 9.7 IBM Initiate Master Data Service Provider Hub 9.5 IBM Initiate Master Data Service Patient Hub 9.7 IBM Initiate Master Data Service Patient Hub 9.5 IBM Initiate Master Data Service 9.7 IBM Initiate Master Data Service 9.5 IBM Initiate Master Data Service 9.2 IBM Initiate Master Data Service 9.0 IBM Initiate Master Data Service 8.1 IBM Initiate Master Data Service 10.1 IBM Initiate Master Data Service 10.0 IBM InfoSphere Master Data Management Provider Hub 10.0 IBM InfoSphere Master Data Management Patient Hub 10.0 IBM Infosphere Master Data Management 11.4 IBM Infosphere Master Data Management 11.3 IBM Infosphere Master Data Management 11.0 IBM Cognos Planning 10.1.1.4 Interim Fix IBM Cognos Planning 10.1 Interim Fix 2 IBM Cognos Controller 10.2.1 FP1 IBM Cognos Controller 10.2.0.1 Interim Fix IBM Cognos Controller 10.1.1.3 IF1 IBM Cognos Controller 10.1 IF3 HP System Management Homepage (SMH) 7.5 Apple Mac Os X 10.10.3 AlienVault AlienVault 4.15.1 |
Discussion
OpenSSL 'dtls1_get_record()' Function NULL Pointer Dereference Denial of Service Vulnerability
OpenSSL is prone to denial-of-service vulnerability due to a NULL pointer dereference condition.
An attacker may exploit this issue to crash the application, resulting in denial-of-service conditions.
OpenSSL is prone to denial-of-service vulnerability due to a NULL pointer dereference condition.
An attacker may exploit this issue to crash the application, resulting in denial-of-service conditions.
Exploit / POC
OpenSSL 'dtls1_get_record()' Function NULL Pointer Dereference Denial of Service Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
OpenSSL 'dtls1_get_record()' Function NULL Pointer Dereference Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenSSL 'dtls1_get_record()' Function NULL Pointer Dereference Denial of Service Vulnerability
References:
References:
- Multiple Vulnerabilities (Pexip)
- OpenSSL Homepage (OpenSSL)
- Splunk response to January 2015 OpenSSL vulnerabilities (Splunk)
- Vulnerabilities in OpenSSL affect Bluemix Workflow (CVE-2014-3570, CVE-2014-357 (IBM)
- Vulnerabilities in OpenSSL affect IBM Security Network Enterprise Scanner (CVE- (IBM)
- [security bulletin] HPSBUX03244 SSRT101885 rev.2 - HP-UX Running OpenSSL, Remote (Seclist.org)
- cpujul2016: Oracle Critical Patch Update Advisory - July 2016 (Oracle)
- Critical Patch Security Advisory - October 2016 (Oracle)
- HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabiliti (HP)
- HPSBHF03289 rev.1- HP ThinClient PCs running ThinPro Linux, Remote Code Executio (HP)
- HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and (HP)
- HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multipl (HP)
- HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities (hp)
- HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerab (HP)
- IBM Cognos Business Intelligence Server is affected by multiple vulnerabilities (IBM)
- IBM Cognos Controller is affected by multiple vulnerabilities (IBM)
- IBM SECURITY ADVISORY (IBM)
- Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products (Cisco)
- OpenSSL Security Advisory [08 Jan 2015] (OpenSSL)
- openssl security update (RHSA-2015-0066) (Avaya)
- OpenSSL vulnerabilities (OpenSSL)
- Oracle Critical Patch Update Advisory - April 2015 (Oracle)
- Oracle Critical Patch Update Advisory - April 2017 (Oracle)
- Oracle Critical Patch Update Advisory - July 2015 (Oracle)
- Security Advisory, AlienVault v4.15.1 addresses twenty (20) vulnerabilities (AlienVault)
- Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Ma (IBM)
- Security Bulletin: Multiple vulnerability in Product IBM Tivoli Common Reporting (IBM)
- Security Bulletin: Real-time Compression Appliance 13 8 issues for openssl, inc (IBM)
- Security Bulletin: Tivoli Provisioning Manager for OS Deployment and Tivoli Prov (IBM)
- Security Bulletin: Vulnerabilities in IBM SDK for Node.js affect IBM Business Pr (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM BladeCenter Advanced Ma (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM FileNet System Monitor/ (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System Manager (FS (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Balanced War (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Tivoli Netcool/Reporter (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect Integrated Management Modul (IBM)
- ssg1S1009328:January 2015 OpenSSL security vulnerabilities in Multiple IBM N Ser (IBM)
- TITLE: Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Maste (IBM)
- Vulnerabilities in OpenSSL affect GPFS V3.5 for Windows (CVE-2014-3569, CVE-2014 (IBM)
- Vulnerabilities in OpenSSL affect IBM Cognos Planning (CVE-2014-3570, CVE-2014-3 (IBM)
- Vulnerabilities in OpenSSL affect IBM Service Delivery Manager. OpenSSL is insta (IBM)
- Vulnerabilities in OpenSSL affect IBM Upward Integration Modules (CVE-2015-0204, (IBM)
- Vulnerabilities in OpenSSL affect Rational Insight (CVE-2014-3569, CVE-2014-3570 (IBM)
- Vulnerabilities in OpenSSL affects Rational Software Architect and Rational Soft (IBM)