CVE-2014-0195

Published: Jun 5, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.

Affected (8)

Products: Openssl: Openssl · Mariadb: Mariadb · Opensuse: Leap, Opensuse · +1 more

Show all products

Openssl: Openssl · Mariadb: Mariadb · Opensuse: Leap, Opensuse · Fedoraproject: Fedora

1 product

1 product

2 products

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	From 0.9.8 to 0.9.8za
Openssl Openssl	From 1.0.0 to 1.0.0m
Openssl Openssl	From 1.0.1 to 1.0.1h

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.13

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 19
Fedoraproject Fedora	Version 20

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (252)

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc

Source: secalert@redhat.com

Third Party Advisory

http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Once-Bled-Twice-Shy-OpenSSL-CVE-2014-0195/ba-p/6501048

Source: secalert@redhat.com

Broken Link

http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-14-173-CVE-2014-0195-OpenSSL-DTLS-Fragment-Out-of-Bounds/ba-p/6501002

Source: secalert@redhat.com

Broken Link

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140266410314613&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140317760000786&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389274407904&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389355508263&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140431828824371&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140448122410568&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140482916501310&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140491231331543&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140499827729550&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140621259019789&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140752315422991&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140904544427729&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=142660345230545&w=2

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2014/Dec/23

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/58337

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58615

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58660

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58713

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58714

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58743

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58883

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58939

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58945

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58977

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59040

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59126

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59162

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59175

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59188

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59189

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59192

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59223

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59287

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59300

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59301

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59305

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59306

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59310

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59342

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59364

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59365

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59413

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59429

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59437

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59441

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59449

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59450

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59451

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59454

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59490

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59491

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59514

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59518

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59528

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59530

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59587

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59655

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59659

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59666

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59669

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59721

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59784

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59895

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59990

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/60571

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/61254

Source: secalert@redhat.com

Not Applicable

http://security.gentoo.org/glsa/glsa-201407-05.xml

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT6443

Source: secalert@redhat.com

Third Party Advisory

http://support.citrix.com/article/CTX140876

Source: secalert@redhat.com

Third Party Advisory

http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15356.html

Source: secalert@redhat.com

Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001841

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001843

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21673137

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21675821

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676035

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676062

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676071

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676419

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676644

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676879

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676889

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21677527

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21677695

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21677828

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21678167

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21678289

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21683332

Source: secalert@redhat.com

Third Party Advisory

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754

Source: secalert@redhat.com

Third Party Advisory

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755

Source: secalert@redhat.com

Third Party Advisory

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756

Source: secalert@redhat.com

Third Party Advisory

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757

Source: secalert@redhat.com

Third Party Advisory

http://www.blackberry.com/btsc/KB36051

Source: secalert@redhat.com

Third Party Advisory

http://www.f-secure.com/en/web/labs_global/fsc-2014-6

Source: secalert@redhat.com

Third Party Advisory

http://www.fortiguard.com/advisory/FG-IR-14-018/

Source: secalert@redhat.com

Third Party Advisory

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.ibm.com/support/docview.wss?uid=swg21676356

Source: secalert@redhat.com

Third Party Advisory

http://www.ibm.com/support/docview.wss?uid=swg21676793

Source: secalert@redhat.com

Broken Link

http://www.ibm.com/support/docview.wss?uid=swg24037783

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:106

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2015:062

Source: secalert@redhat.com

Broken Link

http://www.openssl.org/news/secadv_20140605.txt

Source: secalert@redhat.com

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/67900

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030337

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.vmware.com/security/advisories/VMSA-2014-0006.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1103598

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1632ef744872edc2aa2a53d487d3e79c965a4ad3

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946

Source: secalert@redhat.com

Third Party Advisory

https://kb.bluecoat.com/index?page=content&id=SA80

Source: secalert@redhat.com

Broken Link

https://kc.mcafee.com/corporate/index?page=content&id=SB10075

Source: secalert@redhat.com

Broken Link

https://www.novell.com/support/kb/doc.php?id=7015271

Source: secalert@redhat.com

Third Party Advisory

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc