CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5139

The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.154

EPSS Ranking 94.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-5139

Openssl » Openssl » Version: 1.0.1

cpe:2.3:a:openssl:openssl:1.0.1
Openssl » Openssl » Version: 1.0.1a

cpe:2.3:a:openssl:openssl:1.0.1a
Openssl » Openssl » Version: 1.0.1b

cpe:2.3:a:openssl:openssl:1.0.1b
Openssl » Openssl » Version: 1.0.1c

cpe:2.3:a:openssl:openssl:1.0.1c
Openssl » Openssl » Version: 1.0.1d

cpe:2.3:a:openssl:openssl:1.0.1d
Openssl » Openssl » Version: 1.0.1e

cpe:2.3:a:openssl:openssl:1.0.1e
Openssl » Openssl » Version: 1.0.1f

cpe:2.3:a:openssl:openssl:1.0.1f
Openssl » Openssl » Version: 1.0.1g

cpe:2.3:a:openssl:openssl:1.0.1g
Openssl » Openssl » Version: 1.0.1h

cpe:2.3:a:openssl:openssl:1.0.1h

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5139

Products

Pricing

Contact Us