CVE-2014-0221

Published: Jun 5, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

Affected (16)

Products: Openssl: Openssl · Fedoraproject: Fedora · Redhat: Enterprise Linux, Storage · +3 more

Show all products

Openssl: Openssl · Fedoraproject: Fedora · Redhat: Enterprise Linux, Storage · Mariadb: Mariadb · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit, Linux Enterprise Workstation Extension

1 product

1 product

2 products

1 product

2 products

4 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	From 0.9.8 to 0.9.8za
Openssl Openssl	From 1.0.0 to 1.0.0m
Openssl Openssl	From 1.0.1 to 1.0.1h

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	All versions
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0
Redhat Storage	Version 2.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.13

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 19
Fedoraproject Fedora	Version 20

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Workstation Extension	Version 12

References (254)

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc

Source: secalert@redhat.com

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629

Source: secalert@redhat.com

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-1053.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140266410314613&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140317760000786&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389274407904&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389355508263&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140431828824371&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140448122410568&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140482916501310&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140491231331543&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140499827729550&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140621259019789&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140752315422991&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140904544427729&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1021.html

Source: secalert@redhat.com

Broken Link

http://seclists.org/fulldisclosure/2014/Dec/23

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/58337

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58615

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58713

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58714

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58939

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58945

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58977

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59027

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59120

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59126

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59162

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59167

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59175

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59189

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59192

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59221

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59284

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59287

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59300

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59301

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59306

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59310

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59342

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59364

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59365

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59413

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59429

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59437

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59441

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59449

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59450

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59451

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59454

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59460

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59490

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59491

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59495

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59514

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59518

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59528

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59655

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59659

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59666

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59669

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59721

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59784

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59895

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59990

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/60571

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/60687

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/61254

Source: secalert@redhat.com

Not Applicable

http://security.gentoo.org/glsa/glsa-201407-05.xml

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT6443

Source: secalert@redhat.com

Third Party Advisory

http://support.citrix.com/article/CTX140876

Source: secalert@redhat.com

Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001841

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001843

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21673137

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21675821

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676035

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676062

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676071

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676419

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676879

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676889

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21677527

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21677695

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21677828

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21678167

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21678289

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21683332

Source: secalert@redhat.com

Third Party Advisory

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754

Source: secalert@redhat.com

Broken Link

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755

Source: secalert@redhat.com

Broken Link

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756

Source: secalert@redhat.com

Broken Link

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757

Source: secalert@redhat.com

Broken Link

http://www.blackberry.com/btsc/KB36051

Source: secalert@redhat.com

Third Party Advisory

http://www.fortiguard.com/advisory/FG-IR-14-018/

Source: secalert@redhat.com

Third Party Advisory

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.ibm.com/support/docview.wss?uid=swg21676226

Source: secalert@redhat.com

Broken Link

http://www.ibm.com/support/docview.wss?uid=swg21676356

Source: secalert@redhat.com

Third Party Advisory

http://www.ibm.com/support/docview.wss?uid=swg21676793

Source: secalert@redhat.com

Broken Link

http://www.ibm.com/support/docview.wss?uid=swg24037783

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:105

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2014:106

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2015:062

Source: secalert@redhat.com

Broken Link

http://www.novell.com/support/kb/doc.php?id=7015264

Source: secalert@redhat.com

Third Party Advisory

http://www.novell.com/support/kb/doc.php?id=7015300

Source: secalert@redhat.com

Third Party Advisory

http://www.openssl.org/news/secadv_20140605.txt

Source: secalert@redhat.com

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/67901

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1030337

Source: secalert@redhat.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.vmware.com/security/advisories/VMSA-2014-0006.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: secalert@redhat.com

Third Party Advisory

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E

Source: secalert@redhat.com

Broken Link

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=1103593

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d3152655d5319ce883c8e3ac4b99f8de4c59d846

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946

Source: secalert@redhat.com

Third Party Advisory

https://kb.bluecoat.com/index?page=content&id=SA80

Source: secalert@redhat.com

Broken Link

https://kc.mcafee.com/corporate/index?page=content&id=SB10075

Source: secalert@redhat.com

Broken Link

https://www.novell.com/support/kb/doc.php?id=7015271

Source: secalert@redhat.com

Third Party Advisory

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc