CVE-2014-3470

MEDIUM severity · CVSS 4.3 · CWE-476

4.3CVSS MEDIUM

Summary

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

Impact & exploitability

Attack vectorNetwork

Attack complexity—

Privileges required—

User interaction—

Confidentiality impactNone

Integrity impactNone

Availability impact—

Exploit probability (EPSS)91%

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products we track (4)

MariaDB OpenSSL Red Hat Enterprise Linux SUSE Linux Enterprise

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

NVD record
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascAdvisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlAdvisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlAdvisory