QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-3571

Back to search

CVE-2014-3571

Published: Jan 9, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.

VendorProductVersions

n/a

n/a

affected
n/a

References

HPSBOV03318
vendor-advisory
x_refsource_HP
openSUSE-SU-2015:0130
vendor-advisory
x_refsource_SUSE
HPSBMU03409
vendor-advisory
x_refsource_HP
71937
vdb-entry
x_refsource_BID
HPSBMU03380
vendor-advisory
x_refsource_HP
FEDORA-2015-0601
vendor-advisory
x_refsource_FEDORA
1033378
vdb-entry
x_refsource_SECTRACK
HPSBHF03289
vendor-advisory
x_refsource_HP
openSUSE-SU-2016:0640
vendor-advisory
x_refsource_SUSE
MDVSA-2015:019
vendor-advisory
x_refsource_MANDRIVA
RHSA-2015:0066
vendor-advisory
x_refsource_REDHAT
HPSBUX03244
vendor-advisory
x_refsource_HP
APPLE-SA-2015-04-08-2
vendor-advisory
x_refsource_APPLE
SUSE-SU-2015:0946
vendor-advisory
x_refsource_SUSE
HPSBMU03397
vendor-advisory
x_refsource_HP
HPSBMU03396
vendor-advisory
x_refsource_HP
HPSBUX03162
vendor-advisory
x_refsource_HP
MDVSA-2015:062
vendor-advisory
x_refsource_MANDRIVA
HPSBMU03413
vendor-advisory
x_refsource_HP
SSRT101885
vendor-advisory
x_refsource_HP
DSA-3125
vendor-advisory
x_refsource_DEBIAN
FEDORA-2015-0512
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now