CVE-2014-0198

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
opensslopenssl
1.0.0 ≤
𝑥
≤ 1.0.1g
mariadbmariadb
10.0.0 ≤
𝑥
< 10.0.13
debiandebian_linux
6.0
debiandebian_linux
7.0
debiandebian_linux
8.0
opensuseopensuse
12.3
opensuseopensuse
13.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openssl
bookworm
3.0.14-1~deb12u1
fixed
bookworm (security)
3.0.14-1~deb12u2
fixed
bullseye
1.1.1w-0+deb11u1
fixed
bullseye (security)
1.1.1w-0+deb11u2
fixed
sid
3.3.2-2
fixed
squeeze
not-affected
trixie
3.3.2-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openssl
lucid
not-affected
precise
Fixed 1.0.1-4ubuntu5.13
released
quantal
Fixed 1.0.1c-3ubuntu2.8
released
saucy
Fixed 1.0.1e-3ubuntu1.3
released
trusty
Fixed 1.0.1f-1ubuntu2.1
released
openssl098
lucid
dne
precise
not-affected
quantal
not-affected
saucy
not-affected
trusty
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libmysqlclient18
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
libmysqlclient18-32bit
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
libmysqlclient_r18
suse enterprise desktop 12
10.0.16-15.1
fixed
suse enterprise desktop 12 SP1
10.0.21-1.17
fixed
suse enterprise desktop 12 SP2
10.0.27-12.1
fixed
suse enterprise desktop 12 SP3
10.0.30-28.1
fixed
suse enterprise desktop 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12
10.0.16-15.1
fixed
suse enterprise sap 12 SP1
10.0.21-1.17
fixed
suse enterprise sap 12 SP2
10.0.27-12.1
fixed
suse enterprise sap 12 SP3
10.0.30-28.1
fixed
suse enterprise sap 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12
10.0.16-15.1
fixed
suse enterprise server 12 SP1
10.0.21-1.17
fixed
suse enterprise server 12 SP2
10.0.27-12.1
fixed
suse enterprise server 12 SP3
10.0.30-28.1
fixed
suse enterprise server 12 SP4
10.0.35-1.7
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise workstation 12
10.0.16-15.1
fixed
suse enterprise workstation 12 SP1
10.0.21-1.17
fixed
suse enterprise workstation 12 SP2
10.0.27-12.1
fixed
suse enterprise workstation 12 SP3
10.0.30-28.1
fixed
suse enterprise workstation 12 SP4
10.0.35-1.7
fixed
suse enterprise workstation 12 SP5
10.0.40.1-2.9.1
fixed
libmysqlclient_r18-32bit
suse enterprise desktop 12
10.0.16-15.1
fixed
suse enterprise desktop 12 SP1
10.0.21-1.17
fixed
suse enterprise desktop 12 SP2
10.0.27-12.1
fixed
suse enterprise desktop 12 SP3
10.0.30-28.1
fixed
suse enterprise desktop 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12
10.0.16-15.1
fixed
suse enterprise sap 12 SP1
10.0.21-1.17
fixed
suse enterprise sap 12 SP2
10.0.27-12.1
fixed
suse enterprise sap 12 SP3
10.0.30-28.1
fixed
suse enterprise sap 12 SP4
10.0.35-1.7
fixed
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12
10.0.16-15.1
fixed
suse enterprise server 12 SP1
10.0.21-1.17
fixed
suse enterprise server 12 SP2
10.0.27-12.1
fixed
suse enterprise server 12 SP3
10.0.30-28.1
fixed
suse enterprise server 12 SP4
10.0.35-1.7
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise workstation 12
10.0.16-15.1
fixed
suse enterprise workstation 12 SP1
10.0.21-1.17
fixed
suse enterprise workstation 12 SP2
10.0.27-12.1
fixed
suse enterprise workstation 12 SP3
10.0.30-28.1
fixed
suse enterprise workstation 12 SP4
10.0.35-1.7
fixed
suse enterprise workstation 12 SP5
10.0.40.1-2.9.1
fixed
mariadb
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
mariadb-100-errormessages
suse enterprise sap 12 SP5
10.0.40.1-2.9.1
fixed
suse enterprise server 12 SP5
10.0.40.1-2.9.1
fixed
mariadb-client
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
mariadb-errormessages
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
mariadb-tools
suse enterprise sap 12 SP5
10.2.25-3.19.2
fixed
suse enterprise server 12 SP5
10.2.25-3.19.2
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
openssl
RHEL 6
0:1.0.1e-16.el6_5.14
fixed
RHEL 7
1:1.0.1e-34.el7_0.3
fixed
openssl-devel
RHEL 6
0:1.0.1e-16.el6_5.14
fixed
RHEL 7
1:1.0.1e-34.el7_0.3
fixed
openssl-libs
RHEL 7
1:1.0.1e-34.el7_0.3
fixed
openssl-perl
RHEL 6
0:1.0.1e-16.el6_5.14
fixed
RHEL 7
1:1.0.1e-34.el7_0.3
fixed
openssl-static
RHEL 6
0:1.0.1e-16.el6_5.14
fixed
RHEL 7
1:1.0.1e-34.el7_0.3
fixed
References