CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0198

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.309

EPSS Ranking 96.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-0198

Mariadb » Mariadb » Version: 10.0.0

cpe:2.3:a:mariadb:mariadb:10.0.0
Mariadb » Mariadb » Version: 10.0.1

cpe:2.3:a:mariadb:mariadb:10.0.1
Mariadb » Mariadb » Version: 10.0.10

cpe:2.3:a:mariadb:mariadb:10.0.10
Mariadb » Mariadb » Version: 10.0.11

cpe:2.3:a:mariadb:mariadb:10.0.11
Mariadb » Mariadb » Version: 10.0.12

cpe:2.3:a:mariadb:mariadb:10.0.12
Mariadb » Mariadb » Version: 10.0.2

cpe:2.3:a:mariadb:mariadb:10.0.2
Mariadb » Mariadb » Version: 10.0.3

cpe:2.3:a:mariadb:mariadb:10.0.3
Mariadb » Mariadb » Version: 10.0.4

cpe:2.3:a:mariadb:mariadb:10.0.4
Mariadb » Mariadb » Version: 10.0.5

cpe:2.3:a:mariadb:mariadb:10.0.5
Mariadb » Mariadb » Version: 10.0.6

cpe:2.3:a:mariadb:mariadb:10.0.6
Mariadb » Mariadb » Version: 10.0.7

cpe:2.3:a:mariadb:mariadb:10.0.7
Mariadb » Mariadb » Version: 10.0.8

cpe:2.3:a:mariadb:mariadb:10.0.8
Mariadb » Mariadb » Version: 10.0.9

cpe:2.3:a:mariadb:mariadb:10.0.9
Openssl » Openssl » Version: 1.0.0

cpe:2.3:a:openssl:openssl:1.0.0
Openssl » Openssl » Version: 1.0.0a

cpe:2.3:a:openssl:openssl:1.0.0a
Openssl » Openssl » Version: 1.0.0b

cpe:2.3:a:openssl:openssl:1.0.0b
Openssl » Openssl » Version: 1.0.0c

cpe:2.3:a:openssl:openssl:1.0.0c
Openssl » Openssl » Version: 1.0.0d

cpe:2.3:a:openssl:openssl:1.0.0d
Openssl » Openssl » Version: 1.0.0e

cpe:2.3:a:openssl:openssl:1.0.0e
Openssl » Openssl » Version: 1.0.0f

cpe:2.3:a:openssl:openssl:1.0.0f
Openssl » Openssl » Version: 1.0.0g

cpe:2.3:a:openssl:openssl:1.0.0g
Openssl » Openssl » Version: 1.0.0h

cpe:2.3:a:openssl:openssl:1.0.0h
Openssl » Openssl » Version: 1.0.0i

cpe:2.3:a:openssl:openssl:1.0.0i
Openssl » Openssl » Version: 1.0.0j

cpe:2.3:a:openssl:openssl:1.0.0j
Openssl » Openssl » Version: 1.0.0k

cpe:2.3:a:openssl:openssl:1.0.0k
Openssl » Openssl » Version: 1.0.0l

cpe:2.3:a:openssl:openssl:1.0.0l
Openssl » Openssl » Version: 1.0.0m

cpe:2.3:a:openssl:openssl:1.0.0m
Openssl » Openssl » Version: 1.0.0n

cpe:2.3:a:openssl:openssl:1.0.0n
Openssl » Openssl » Version: 1.0.0o

cpe:2.3:a:openssl:openssl:1.0.0o
Openssl » Openssl » Version: 1.0.0p

cpe:2.3:a:openssl:openssl:1.0.0p
Openssl » Openssl » Version: 1.0.0q

cpe:2.3:a:openssl:openssl:1.0.0q
Openssl » Openssl » Version: 1.0.0r

cpe:2.3:a:openssl:openssl:1.0.0r
Openssl » Openssl » Version: 1.0.0s

cpe:2.3:a:openssl:openssl:1.0.0s
Openssl » Openssl » Version: 1.0.0t

cpe:2.3:a:openssl:openssl:1.0.0t
Openssl » Openssl » Version: 1.0.1

cpe:2.3:a:openssl:openssl:1.0.1
Openssl » Openssl » Version: 1.0.1a

cpe:2.3:a:openssl:openssl:1.0.1a
Openssl » Openssl » Version: 1.0.1b

cpe:2.3:a:openssl:openssl:1.0.1b
Openssl » Openssl » Version: 1.0.1c

cpe:2.3:a:openssl:openssl:1.0.1c
Openssl » Openssl » Version: 1.0.1d

cpe:2.3:a:openssl:openssl:1.0.1d
Openssl » Openssl » Version: 1.0.1e

cpe:2.3:a:openssl:openssl:1.0.1e
Openssl » Openssl » Version: 1.0.1f

cpe:2.3:a:openssl:openssl:1.0.1f
Openssl » Openssl » Version: 1.0.1g

cpe:2.3:a:openssl:openssl:1.0.1g
Debian » Debian Linux » Version: 6.0

cpe:2.3:o:debian:debian_linux:6.0
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Fedoraproject » Fedora » Version: 19

cpe:2.3:o:fedoraproject:fedora:19
Fedoraproject » Fedora » Version: 20

cpe:2.3:o:fedoraproject:fedora:20
Opensuse » Opensuse » Version: 12.3

cpe:2.3:o:opensuse:opensuse:12.3
Opensuse » Opensuse » Version: 13.1

cpe:2.3:o:opensuse:opensuse:13.1
Suse » Linux Enterprise Desktop » Version: 12

cpe:2.3:o:suse:linux_enterprise_desktop:12
Suse » Linux Enterprise Server » Version: 12

cpe:2.3:o:suse:linux_enterprise_server:12
Suse » Linux Enterprise Software Development Kit » Version: 12

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12
Suse » Linux Enterprise Workstation Extension » Version: 12

cpe:2.3:o:suse:linux_enterprise_workstation_extension:12

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0198

Products

Pricing

Contact Us