Description
The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2931-1 | openssl security update |
Ubuntu USN |
USN-2192-1 | OpenSSL vulnerabilities |
References
History
No history.
Subscriptions
Debian
Subscribe
Debian Linux
Subscribe
Fedoraproject
Subscribe
Fedora
Subscribe
Mariadb
Subscribe
Mariadb
Subscribe
Openssl
Subscribe
Openssl
Subscribe
Opensuse
Subscribe
Opensuse
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Storage
Subscribe
Suse
Subscribe
Linux Enterprise Desktop
Subscribe
Linux Enterprise Server
Subscribe
Linux Enterprise Software Development Kit
Subscribe
Linux Enterprise Workstation Extension
Subscribe
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T09:05:39.267Z
Reserved: 2013-12-03T00:00:00.000Z
Link: CVE-2014-0198
No data.
Status : Deferred
Published: 2014-05-06T10:44:05.470
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-0198
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
Ubuntu USN