CVE-2014-3470

Published: Jun 5, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

Affected (16)

Products: Openssl: Openssl · Fedoraproject: Fedora · Redhat: Enterprise Linux, Storage · +3 more

Show all products

Openssl: Openssl · Fedoraproject: Fedora · Redhat: Enterprise Linux, Storage · Mariadb: Mariadb · Opensuse: Leap, Opensuse · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit, Linux Enterprise Workstation Extension

1 product

1 product

2 products

1 product

2 products

4 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Linux Enterprise Workstation Extension

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Before 0.9.8za
Openssl Openssl	From 1.0.0 to 1.0.0m
Openssl Openssl	From 1.0.1 to 1.0.1h

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	All versions
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0
Redhat Storage	Version 2.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 10.0.0 to 10.0.13

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 19
Fedoraproject Fedora	Version 20

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Workstation Extension	Version 12

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (300)

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc

Source: secalert@redhat.com

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629

Source: secalert@redhat.com

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140266410314613&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140317760000786&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389274407904&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389355508263&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140431828824371&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140448122410568&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140482916501310&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140491231331543&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140499827729550&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140621259019789&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140752315422991&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140904544427729&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2014/Dec/23

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/58337

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58579

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58615

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58667

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58713

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58714

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58716

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58742

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58797

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58939

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58945

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/58977

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59120

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59126

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59162

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59167

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59175

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59189

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59191

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59192

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59223

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59264

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59282

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59284

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59287

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59300

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59301

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59306

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59310

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59340

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59342

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59362

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59364

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59365

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59413

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59431

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59437

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59438

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59440

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59441

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59442

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59445

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59449

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59450

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59451

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59459

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59460

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59483

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59490

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59491

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59495

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59514

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59518

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59525

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59655

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59659

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59666

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59669

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59721

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59784

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59895

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59916

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/59990

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/60571

Source: secalert@redhat.com

Not Applicable

http://secunia.com/advisories/61254

Source: secalert@redhat.com

Not Applicable

http://security.gentoo.org/glsa/glsa-201407-05.xml

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT6443

Source: secalert@redhat.com

Third Party Advisory

http://support.citrix.com/article/CTX140876

Source: secalert@redhat.com

Third Party Advisory

http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.html

Source: secalert@redhat.com

Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001841

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001843

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21673137

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21675626

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21675821

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676035

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676062

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676071

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676419

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676496

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676501

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676529

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676615

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676655

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21676879

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21676889

Source: secalert@redhat.com

Broken Link

http://www-01.ibm.com/support/docview.wss?uid=swg21677527

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21677695

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21677828

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21677836

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21678167

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21678289

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21683332

Source: secalert@redhat.com

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg24037761

Source: secalert@redhat.com

Third Party Advisory

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754

Source: secalert@redhat.com

Broken Link

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755

Source: secalert@redhat.com

Broken Link

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756

Source: secalert@redhat.com

Broken Link

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757

Source: secalert@redhat.com

Broken Link

http://www.blackberry.com/btsc/KB36051

Source: secalert@redhat.com

Third Party Advisory

http://www.f-secure.com/en/web/labs_global/fsc-2014-6

Source: secalert@redhat.com

Third Party Advisory

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.ibm.com/support/docview.wss?uid=swg21676356

Source: secalert@redhat.com

Third Party Advisory

http://www.ibm.com/support/docview.wss?uid=swg21676793

Source: secalert@redhat.com

Third Party Advisory

http://www.ibm.com/support/docview.wss?uid=swg24037783

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:105

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2014:106

Source: secalert@redhat.com

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2015:062

Source: secalert@redhat.com

Broken Link

http://www.novell.com/support/kb/doc.php?id=7015264

Source: secalert@redhat.com

Third Party Advisory

http://www.novell.com/support/kb/doc.php?id=7015300

Source: secalert@redhat.com

Third Party Advisory

http://www.openssl.org/news/secadv_20140605.txt

Source: secalert@redhat.com

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/534161/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/67898

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.splunk.com/view/SP-CAAAM2D

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2014-0006.html

Source: secalert@redhat.com

Third Party Advisory

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Source: secalert@redhat.com

Third Party Advisory

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E

Source: secalert@redhat.com

Broken Link

http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E

Source: secalert@redhat.com

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=1103600

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf

Source: secalert@redhat.com

Third Party Advisory

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=8011cd56e39a433b1837465259a9bd24a38727fb

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946

Source: secalert@redhat.com

Third Party Advisory

https://kb.bluecoat.com/index?page=content&id=SA80

Source: secalert@redhat.com

Broken Link

https://kc.mcafee.com/corporate/index?page=content&id=SB10075

Source: secalert@redhat.com

Broken Link

https://www.novell.com/support/kb/doc.php?id=7015271

Source: secalert@redhat.com

Third Party Advisory

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc