CVE-2014-0198
06.05.2014, 10:44
The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openssl | openssl | 1.0.0 ≤ 𝑥 ≤ 1.0.1g |
| mariadb | mariadb | 10.0.0 ≤ 𝑥 < 10.0.13 |
| debian | debian_linux | 6.0 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| opensuse | opensuse | 12.3 |
| opensuse | opensuse | 13.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libmysqlclient18 |
| ||||||||||||||||||||||||||||||||||||||||||||||
| libmysqlclient18-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||
| libmysqlclient_r18 |
| ||||||||||||||||||||||||||||||||||||||||||||||
| libmysqlclient_r18-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||
| mariadb |
| ||||||||||||||||||||||||||||||||||||||||||||||
| mariadb-100-errormessages |
| ||||||||||||||||||||||||||||||||||||||||||||||
| mariadb-client |
| ||||||||||||||||||||||||||||||||||||||||||||||
| mariadb-errormessages |
| ||||||||||||||||||||||||||||||||||||||||||||||
| mariadb-tools |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| openssl |
| ||||
| openssl-devel |
| ||||
| openssl-libs |
| ||||
| openssl-perl |
| ||||
| openssl-static |
|
Common Weakness Enumeration
References