CVE-2014-3513

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...

7.1 HighFix available

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Exploit likelihood

37.1%Up 29.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.1

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Record: CVE-2014-3513
CVSS 2.0: 7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Record: CVE-2014-3513
Updated: 2026-11-02

EUVDEUVD-2014-3514 No score

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Record: EUVD-2014-3514
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mxph-x9r8-xwgr No score

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Record: GHSA-mxph-x9r8-xwgr
Weakness: CWE-20
Updated: 2026-11-02

OSVBELL-CVE-2014-3513 7.1

CVE-2014-3513 does not affect BellSoft software

Record: BELL-CVE-2014-3513
CVSS 2.0: 7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Updated: 2026-11-02

OSV No score

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Record: CVE-2014-3513
Updated: 2026-11-02

Show 16 moreShow less

OSVDEBIAN-CVE-2014-3513 No score

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Record: DEBIAN-CVE-2014-3513
Updated: 2026-11-02

OSVMGASA-2014-0416 No score

Updated openssl packages fix security vulnerabilities

This update adds support for the TLS Fallback Signaling Cipher Suite Value (TLS_FALLBACK_SCSV), which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol version fails.

This can prevent a forceful downgrade of the communication to SSL 3.0. The SSL 3.0 protocol was found to be vulnerable to the padding oracle attack when using block cipher suites in cipher block chaining (CBC) mode. This issue is identified as CVE-2014-3566, and also known under the alias POODLE. This SSL 3.0 protocol flaw will not be addressed in a future update; it is recommended that users configure their applications to require at least TLS protocol version 1.0 for secure communication.

For additional information about this flaw, see the RedHat Knowledgebase article in the references.

A memory leak flaw was found in the way OpenSSL parsed the DTLS Secure Real-time Transport Protocol (SRTP) extension data. A remote attacker could send multiple specially crafted handshake messages to exhaust all available memory of an SSL/TLS or DTLS server (CVE-2014-3513).

A memory leak flaw was found in the way an OpenSSL handled failed session ticket integrity checks. A remote attacker could exhaust all available memory of an SSL/TLS or DTLS server by sending a large number of invalid session tickets to that server (CVE-2014-3567).

Record: MGASA-2014-0416
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10271-1 No score

libopenssl-devel-1.0.2j-2.2 on GA media

These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10271-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10529-1 No score

libopenssl1_0_0-steam-1.0.2h-4.1 on GA media

These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10529-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11127-1 No score

libopenssl-1_1-devel-1.1.1l-1.2 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11127-1
Updated: 2026-11-02

OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

Introduce venv-salt-minion.
Mention fixed issues provided with the bundle.

Record: SUSE-FU-2022:0445-1
Updated: 2026-11-02

OSVSUSE-RU-2015:0769-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-RU-2015:0769-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0545-1 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>

Record: SUSE-SU-2015:0545-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0546-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:0546-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1184-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:1184-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1184-2 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>

Record: SUSE-SU-2015:1184-2
Updated: 2026-11-02

OSVSUSE-SU-2015:1185-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-2015:1185-1
Updated: 2026-11-02

OSVSUSE-SU-403 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-403
Updated: 2026-11-02

OSVSUSE-SU-403 Forbidden-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>

Record: SUSE-SU-403 Forbidden-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-3513 No score

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

Record: UBUNTU-CVE-2014-3513
Updated: 2026-11-02

OSVUSN-2385-1 No score

openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled memory when parsing DTLS SRTP extension data. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-3513)

It was discovered that OpenSSL incorrectly handled memory when verifying the integrity of a session ticket. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. (CVE-2014-3567)

In addition, this update introduces support for the TLS Fallback Signaling Cipher Suite Value (TLS_FALLBACK_SCSV). This new feature prevents protocol downgrade attacks when certain applications such as web browsers attempt to reconnect using a lower protocol version for interoperability reasons.

Record: USN-2385-1
Updated: 2026-11-02

Affected products

openssl

Affected packages

Affected packages
Package	Affected	Fixed
`openssl` Debian:12	before 1.0.1j-1	1.0.1j-1
`openssl` Debian:13	before 1.0.1j-1	1.0.1j-1
`openssl` Debian:14	before 1.0.1j-1	1.0.1j-1
`openssl` Debian:7	before 1.0.1e-2+deb7u13, plus listed versions 1.0.1e-21.0.1e-2+deb7u11.0.1e-2+deb7u101.0.1e-2+deb7u111.0.1e-2+deb7u12 Show 8 moreShow less 1.0.1e-2+deb7u21.0.1e-2+deb7u31.0.1e-2+deb7u41.0.1e-2+deb7u51.0.1e-2+deb7u61.0.1e-2+deb7u71.0.1e-2+deb7u81.0.1e-2+deb7u9	1.0.1e-2+deb7u13
`openssl` Mageia:3	before 1.0.1e-1.11.mga3	1.0.1e-1.11.mga3
`openssl` Mageia:4	before 1.0.1e-8.8.mga4	1.0.1e-8.8.mga4
`openssl` Red Hat:enterprise_linux:6::client	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-devel` Red Hat:enterprise_linux:6::client	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-perl` Red Hat:enterprise_linux:6::client	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2

Show 73 moreShow less

Affected packages
Package	Affected	Fixed
`openssl-static` Red Hat:enterprise_linux:6::client	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl` Red Hat:enterprise_linux:6::computenode	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-devel` Red Hat:enterprise_linux:6::computenode	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-perl` Red Hat:enterprise_linux:6::computenode	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-static` Red Hat:enterprise_linux:6::computenode	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl` Red Hat:enterprise_linux:6::server	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-devel` Red Hat:enterprise_linux:6::server	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-perl` Red Hat:enterprise_linux:6::server	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-static` Red Hat:enterprise_linux:6::server	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl` Red Hat:enterprise_linux:6::workstation	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-devel` Red Hat:enterprise_linux:6::workstation	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-perl` Red Hat:enterprise_linux:6::workstation	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-static` Red Hat:enterprise_linux:6::workstation	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl` Red Hat:enterprise_linux:7::client	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-debuginfo` Red Hat:enterprise_linux:7::client	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-libs` Red Hat:enterprise_linux:7::client	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-devel` Red Hat:enterprise_linux:7::client	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-perl` Red Hat:enterprise_linux:7::client	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-static` Red Hat:enterprise_linux:7::client	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl` Red Hat:enterprise_linux:7::computenode	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-debuginfo` Red Hat:enterprise_linux:7::computenode	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-libs` Red Hat:enterprise_linux:7::computenode	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-devel` Red Hat:enterprise_linux:7::computenode	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-perl` Red Hat:enterprise_linux:7::computenode	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-static` Red Hat:enterprise_linux:7::computenode	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl` Red Hat:enterprise_linux:7::server	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-debuginfo` Red Hat:enterprise_linux:7::server	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-devel` Red Hat:enterprise_linux:7::server	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-libs` Red Hat:enterprise_linux:7::server	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-perl` Red Hat:enterprise_linux:7::server	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-static` Red Hat:enterprise_linux:7::server	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl` Red Hat:enterprise_linux:7::workstation	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-debuginfo` Red Hat:enterprise_linux:7::workstation	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-devel` Red Hat:enterprise_linux:7::workstation	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-libs` Red Hat:enterprise_linux:7::workstation	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-perl` Red Hat:enterprise_linux:7::workstation	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl-static` Red Hat:enterprise_linux:7::workstation	before 1:1.0.1e-34.el7_0.6	1:1.0.1e-34.el7_0.6
`openssl` Red Hat:storage:2.1:server:el6	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-debuginfo` Red Hat:storage:2.1:server:el6	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-devel` Red Hat:storage:2.1:server:el6	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-perl` Red Hat:storage:2.1:server:el6	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`openssl-static` Red Hat:storage:2.1:server:el6	before 0:1.0.1e-30.el6_6.2	0:1.0.1e-30.el6_6.2
`libqt4` SUSE:Linux Enterprise Desktop 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Desktop 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Desktop 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Desktop 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Software Development Kit 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Software Development Kit 12	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Software Development Kit 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Software Development Kit 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Software Development Kit 12 SP1	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Software Development Kit 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server 12	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server for SAP Applications 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server for SAP Applications 12	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server for SAP Applications 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server 12 SP1	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4-devel-doc` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 4.8.6-7.3	4.8.6-7.3
`libqt4-sql-plugins` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Workstation Extension 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Workstation Extension 12	before 4.8.6-7.1	4.8.6-7.1
`libqt4` SUSE:Linux Enterprise Workstation Extension 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`libqt4-sql-plugins` SUSE:Linux Enterprise Workstation Extension 12 SP1	before 4.8.6-7.1	4.8.6-7.1
`openssl` Ubuntu:14.04:LTS	before 1.0.1f-1ubuntu2.7, plus listed versions 1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu4 Show 7 moreShow less 1.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.11.0.1f-1ubuntu2.21.0.1f-1ubuntu2.31.0.1f-1ubuntu2.41.0.1f-1ubuntu2.5	1.0.1f-1ubuntu2.7
`openssl-1_1` openSUSE:Tumbleweed	before 1.1.1l-1.2	1.1.1l-1.2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3513 is a high vulnerability (CVSS 7.1) in Openssl, published March 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 37.1%, the 98th percentile. Fixed in openssl 1.0.1j-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 593 references. The JSON record has them.