CVE-2014-3569 : Detail

CVE-2014-3569

78.29%V3
Network
2014-12-24
10h00 +00:00
2017-11-14
09h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Openssl>>Openssl >> Version 1.0.1j

References

http://www.securityfocus.com/bid/71934
Tags : vdb-entry, x_refsource_BID
http://marc.info/?l=bugtraq&m=142895206924048&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=144050155601375&w=2
Tags : vendor-advisory, x_refsource_HP
https://support.apple.com/HT204659
Tags : x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=143748090628601&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1033378
Tags : vdb-entry, x_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=142721102728110&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.mandriva.com/security/advisories?name=MDVSA-2015:019
Tags : vendor-advisory, x_refsource_MANDRIVA
http://marc.info/?l=bugtraq&m=142496289803847&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=144050297101809&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=144050205101530&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=142496179803395&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
Tags : vendor-advisory, x_refsource_MANDRIVA
http://marc.info/?l=bugtraq&m=144050254401665&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=142496289803847&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.debian.org/security/2015/dsa-3125
Tags : vendor-advisory, x_refsource_DEBIAN