CVE-2014-0198

MEDIUM severity · CVSS 4.3 · CWE-476

4.3CVSS MEDIUM

Summary

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.

Impact & exploitability

Attack vectorNetwork

Attack complexity—

Privileges required—

User interaction—

Confidentiality impactNone

Integrity impactNone

Availability impact—

Exploit probability (EPSS)33%

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products we track (4)

MariaDB OpenSSL Debian SUSE Linux Enterprise

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

NVD record
http://advisories.mageia.org/MGASA-2014-0204.htmlAdvisory
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascAdvisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlAdvisory
http://lists.opensuse.org/opensuse-updates/2014-05/msg00036.htmlAdvisory