CVE-2014-3470

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...

4.3 MediumFix available

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

Exploit likelihood

85.8%Up 51.3 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2014-3470
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-476
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-3470
Updated: 2026-11-02

EUVDEUVD-2014-3482 No score

Record: EUVD-2014-3482
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rq9h-37gr-2m9p No score

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...

Record: GHSA-rq9h-37gr-2m9p
Weakness: CWE-476
Updated: 2026-11-02

OSVBELL-CVE-2014-3470 4.3

CVE-2014-3470 does not affect BellSoft software

Record: BELL-CVE-2014-3470
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

OSV No score

Record: CVE-2014-3470
Updated: 2026-11-02

Show 24 moreShow less

OSVDEBIAN-CVE-2014-3470 No score

Record: DEBIAN-CVE-2014-3470
Updated: 2026-11-02

OSVMGASA-2014-0255 No score

Updated openssl packages fix multiple vulnerabilties

Updated openssl packages fix security vulnerabilities:

It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a client and a server. (CVE-2014-0224)

Note: In order to exploit this flaw, both the server and the client must be using a vulnerable version of OpenSSL; the server must be using OpenSSL version 1.0.1 and above, and the client must be using any version of OpenSSL. For more information about this flaw, refer to RedHat article 904433 in the references. All currently supported versions of Mageia are running OpenSSL 1.0.1.

A buffer overflow flaw was found in the way OpenSSL handled invalid DTLS packet fragments. A remote attacker could possibly use this flaw to execute arbitrary code on a DTLS client or server. (CVE-2014-0195)

A denial of service flaw was found in the way OpenSSL handled certain DTLS ServerHello requests. A specially crafted DTLS handshake packet could cause a DTLS client using OpenSSL to crash. (CVE-2014-0221)

A NULL pointer dereference flaw was found in the way OpenSSL performed anonymous Elliptic Curve Diffie Hellman (ECDH) key exchange. A specially crafted handshake packet could cause a TLS/SSL client that has the anonymous ECDH cipher suite enabled to crash. (CVE-2014-3470)

Record: MGASA-2014-0255
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10271-1 No score

libopenssl-devel-1.0.2j-2.2 on GA media

These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10271-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10529-1 No score

libopenssl1_0_0-steam-1.0.2h-4.1 on GA media

These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10529-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11127-1 No score

libopenssl-1_1-devel-1.1.1l-1.2 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11127-1
Updated: 2026-11-02

OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

Introduce venv-salt-minion.
Mention fixed issues provided with the bundle.

Record: SUSE-FU-2022:0445-1
Updated: 2026-11-02

OSVSUSE-RU-2015:0769-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-RU-2015:0769-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0182-2 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  can result in memory corruption during buffer management operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>

Record: SUSE-SU-2015:0182-2
Updated: 2026-11-02

OSVSUSE-SU-2015:0543-1 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  can result in memory corruption during buffer management operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>

Record: SUSE-SU-2015:0543-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0545-1 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>

Record: SUSE-SU-2015:0545-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0545-2 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:0545-2
Updated: 2026-11-02

OSVSUSE-SU-2015:0546-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:0546-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0578-1 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  could have resulted in memory corruption during buffer management
  operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>

Record: SUSE-SU-2015:0578-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0743-1 No score

Security update for mariadb

mariadb was updated to version 10.0.16 to fix 40 security issues.

These security issues were fixed:

CVE-2015-0411: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption (bnc#915911).
CVE-2015-0382: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381 (bnc#915911).
CVE-2015-0381: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0382 (bnc#915911).
CVE-2015-0432: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key (bnc#915911).
CVE-2014-6568: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allowed remote authenticated users to affect availability via vectors related to Server : InnoDB : DML (bnc#915911).
CVE-2015-0374: Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allowed remote authenticated users to affect confidentiality via unknown vectors related to Server : Security : Privileges : Foreign Key (bnc#915911).
CVE-2014-6507: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).
CVE-2014-6491: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500 (bnc#915912).
CVE-2014-6500: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491 (bnc#915912).
CVE-2014-6469: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and eariler and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER (bnc#915912).
CVE-2014-6555: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML (bnc#915912).
CVE-2014-6559: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING (bnc#915912).
CVE-2014-6494: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496 (bnc#915912).
CVE-2014-6496: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allowed remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494 (bnc#915912).
CVE-2014-6464: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allowed remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS (bnc#915912).
CVE-2010-5298: Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when…

Record: SUSE-SU-2015:0743-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1182-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:1182-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1182-2 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:1182-2
Updated: 2026-11-02

OSVSUSE-SU-2015:1183-1 No score

Security update for compat-openssl097g

This compat-openssl097g rollup update contains various security fixes:

* CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL
  could have resulted in memory corruption during buffer management
  operations.

Security Issue reference:

* CVE-2012-2110
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110>

Record: SUSE-SU-2015:1183-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1184-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:1184-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1184-2 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>

Record: SUSE-SU-2015:1184-2
Updated: 2026-11-02

OSVSUSE-SU-2015:1185-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:1185-1
Updated: 2026-11-02

OSVSUSE-SU-403 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-403
Updated: 2026-11-02

OSVSUSE-SU-403 Forbidden-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-403 Forbidden-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-3470 No score

Record: UBUNTU-CVE-2014-3470
Updated: 2026-11-02

OSVUSN-2232-1 No score

openssl vulnerabilities

Jüri Aedla discovered that OpenSSL incorrectly handled invalid DTLS fragments. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and Ubuntu 14.04 LTS. (CVE-2014-0195)

Imre Rad discovered that OpenSSL incorrectly handled DTLS recursions. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2014-0221)

KIKUCHI Masashi discovered that OpenSSL incorrectly handled certain handshakes. A remote attacker could use this flaw to perform a machine-in-the-middle attack and possibly decrypt and modify traffic. (CVE-2014-0224)

Felix Gröbert and Ivan Fratrić discovered that OpenSSL incorrectly handled anonymous ECDH ciphersuites. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and Ubuntu 14.04 LTS. (CVE-2014-3470)

Record: USN-2232-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openssl` Debian:12	before 1.0.1h-1	1.0.1h-1
`openssl` Debian:13	before 1.0.1h-1	1.0.1h-1
`openssl` Debian:14	before 1.0.1h-1	1.0.1h-1
`openssl` Debian:6.0 From an advisory covering 5 CVEs	before 0.9.8o-4squeeze15, plus listed versions 0.9.8o-40.9.8o-4squeeze10.9.8o-4squeeze110.9.8o-4squeeze120.9.8o-4squeeze13 Show 9 moreShow less 0.9.8o-4squeeze140.9.8o-4squeeze20.9.8o-4squeeze30.9.8o-4squeeze40.9.8o-4squeeze4~bpo50+10.9.8o-4squeeze50.9.8o-4squeeze70.9.8o-4squeeze80.9.8o-4squeeze9	0.9.8o-4squeeze15
`openssl` Debian:7 From an advisory covering 4 CVEs	before 1.0.1e-2+deb7u10, plus listed versions 1.0.1e-21.0.1e-2+deb7u11.0.1e-2+deb7u21.0.1e-2+deb7u31.0.1e-2+deb7u4 Show 5 moreShow less 1.0.1e-2+deb7u51.0.1e-2+deb7u61.0.1e-2+deb7u71.0.1e-2+deb7u81.0.1e-2+deb7u9	1.0.1e-2+deb7u10
`openssl` Mageia:3 From an advisory covering 4 CVEs	before 1.0.1e-1.9.mga3	1.0.1e-1.9.mga3
`openssl` Mageia:4 From an advisory covering 4 CVEs	before 1.0.1e-8.6.mga4	1.0.1e-8.6.mga4
`openssl` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-devel` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14

Show 80 moreShow less

Affected packages
Package	Affected	Fixed
`openssl-perl` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-static` Red Hat:enterprise_linux:6::client From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-perl` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-static` Red Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-devel` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-perl` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-static` Red Hat:enterprise_linux:6::server From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-perl` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-static` Red Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl` Red Hat:storage:2.1:server:el6 From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-debuginfo` Red Hat:storage:2.1:server:el6 From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-devel` Red Hat:storage:2.1:server:el6 From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-perl` Red Hat:storage:2.1:server:el6 From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl-static` Red Hat:storage:2.1:server:el6 From an advisory covering 6 CVEs	before 0:1.0.1e-16.el6_5.14	0:1.0.1e-16.el6_5.14
`openssl` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-libs` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-devel` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-perl` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-static` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-perl` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-static` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-devel` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-libs` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-perl` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-static` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-perl` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`openssl-static` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.0.1e-34.el7_0.3	1:1.0.1e-34.el7_0.3
`mariadb` SUSE:Linux Enterprise Desktop 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Server 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`mariadb` SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 40 CVEs	before 10.0.16-15.1	10.0.16-15.1
`libqt4` SUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs	before 4.8.6-7.1	4.8.6-7.1
`openssl` Ubuntu:14.04:LTS	before 1.0.1f-1ubuntu2.2, plus listed versions 1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu41.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.1	1.0.1f-1ubuntu2.2
`openssl` Ubuntu:14.04:LTS From an advisory covering 4 CVEs	before 1.0.1f-1ubuntu2.2, plus listed versions 1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu41.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.1	1.0.1f-1ubuntu2.2
`openssl-1_1` openSUSE:Tumbleweed From an advisory covering 136 CVEs	before 1.1.1l-1.2	1.1.1l-1.2

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3470 is a medium vulnerability (CVSS 4.3) in Openssl, published August 30, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 85.8%, the 99th percentile. Fixed in openssl 1.0.1h-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 779 references and the rest of 1 source description. The JSON record has them.