CVE-2014-3511

Published: Aug 13, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a "protocol downgrade" issue.

Affected (31)

Products: Openssl: Openssl

Openssl

1 product

Openssl

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 1.0.0
Openssl Openssl	Version 1.0.0 beta1
Openssl Openssl	Version 1.0.0 beta2
Openssl Openssl	Version 1.0.0 beta3
Openssl Openssl	Version 1.0.0 beta4
Openssl Openssl	Version 1.0.0 beta5
Openssl Openssl	Version 1.0.0a
Openssl Openssl	Version 1.0.0b
Openssl Openssl	Version 1.0.0c
Openssl Openssl	Version 1.0.0d
Openssl Openssl	Version 1.0.0e
Openssl Openssl	Version 1.0.0f
Openssl Openssl	Version 1.0.0g
Openssl Openssl	Version 1.0.0h
Openssl Openssl	Version 1.0.0i
Openssl Openssl	Version 1.0.0j
Openssl Openssl	Version 1.0.0k
Openssl Openssl	Version 1.0.0l
Openssl Openssl	Version 1.0.0m
Openssl Openssl	Version 1.0.1
Openssl Openssl	Version 1.0.1 beta1
Openssl Openssl	Version 1.0.1 beta2
Openssl Openssl	Version 1.0.1 beta3
Openssl Openssl	Version 1.0.1a
Openssl Openssl	Version 1.0.1b
Openssl Openssl	Version 1.0.1c
Openssl Openssl	Version 1.0.1d
Openssl Openssl	Version 1.0.1e
Openssl Openssl	Version 1.0.1f
Openssl Openssl	Version 1.0.1g
Openssl Openssl	Version 1.0.1h

References (124)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc (unsafe URL)

Source: secalert@redhat.com

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc

Source: secalert@redhat.com

http://linux.oracle.com/errata/ELSA-2014-1052.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=142350350616251&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=142495837901899&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=142624590206005&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=142660345230545&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=142791032306609&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=143290437727362&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=143290522027658&w=2

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0126.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-0197.html

Source: secalert@redhat.com

http://secunia.com/advisories/58962

Source: secalert@redhat.com

http://secunia.com/advisories/59700

Source: secalert@redhat.com

http://secunia.com/advisories/59710

Source: secalert@redhat.com

http://secunia.com/advisories/59756

Source: secalert@redhat.com

http://secunia.com/advisories/59887

Source: secalert@redhat.com

http://secunia.com/advisories/60022

Source: secalert@redhat.com

http://secunia.com/advisories/60221

Source: secalert@redhat.com

http://secunia.com/advisories/60377

Source: secalert@redhat.com

http://secunia.com/advisories/60493

Source: secalert@redhat.com

http://secunia.com/advisories/60684

Source: secalert@redhat.com

http://secunia.com/advisories/60803

Source: secalert@redhat.com

http://secunia.com/advisories/60810

Source: secalert@redhat.com

http://secunia.com/advisories/60890

Source: secalert@redhat.com

http://secunia.com/advisories/60917

Source: secalert@redhat.com

http://secunia.com/advisories/60921

Source: secalert@redhat.com

http://secunia.com/advisories/60938

Source: secalert@redhat.com

http://secunia.com/advisories/61017

Source: secalert@redhat.com

http://secunia.com/advisories/61043

Source: secalert@redhat.com

http://secunia.com/advisories/61100

Source: secalert@redhat.com

http://secunia.com/advisories/61139

Source: secalert@redhat.com

http://secunia.com/advisories/61184

Source: secalert@redhat.com

http://secunia.com/advisories/61775

Source: secalert@redhat.com

http://secunia.com/advisories/61959

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201412-39.xml

Source: secalert@redhat.com

http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15564.html

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21682293

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21683389

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21686997

Source: secalert@redhat.com

http://www.arubanetworks.com/support/alerts/aid-08182014.txt

Source: secalert@redhat.com

http://www.debian.org/security/2014/dsa-2998

Source: secalert@redhat.com

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm

Source: secalert@redhat.com

http://www.securityfocus.com/bid/69079

Source: secalert@redhat.com

http://www.securitytracker.com/id/1030693

Source: secalert@redhat.com

http://www.splunk.com/view/SP-CAAANHS

Source: secalert@redhat.com

http://www.tenable.com/security/tns-2014-06

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1127504

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/95162

Source: secalert@redhat.com

https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=280b1f1ad12131defcd986676a8fc9717aaa601b

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380

Source: secalert@redhat.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10084

Source: secalert@redhat.com

https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html

Source: secalert@redhat.com

https://support.citrix.com/article/CTX216642

Source: secalert@redhat.com

https://techzone.ergon.ch/CVE-2014-3511

Source: secalert@redhat.com

https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc

Source: secalert@redhat.com

https://www.openssl.org/news/secadv_20140806.txt

Source: secalert@redhat.com

Vendor Advisory

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc (unsafe URL)