Every CVE Search/ Get API key

CVE-2014-3567

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...

7.1 HighFix available

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Exploit likelihood

22.7%Up 15.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.1

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Record
CVE-2014-3567
CVSS 2.0
7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-20, CWE-399
Updated
2026-11-02
CVE List No score

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Record
CVE-2014-3567
Updated
2026-11-02
EUVDEUVD-2014-3548 No score

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Record
EUVD-2014-3548
Updated
2026-11-03
GitHub AdvisoriesGHSA-5cmf-xwq3-4rj3 No score

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Record
GHSA-5cmf-xwq3-4rj3
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2014-3567 7.1

CVE-2014-3567 does not affect BellSoft software

Record
BELL-CVE-2014-3567
CVSS 2.0
7.1 HighAV:N/AC:M/Au:N/C:N/I:N/A:C
Updated
2026-11-02
OSV No score

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Record
CVE-2014-3567
Updated
2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2014-3567 No score

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Record
DEBIAN-CVE-2014-3567
Updated
2026-11-02
OSVMGASA-2014-0416 No score

Updated openssl packages fix security vulnerabilities

This update adds support for the TLS Fallback Signaling Cipher Suite Value (TLS_FALLBACK_SCSV), which can be used to prevent protocol downgrade attacks against applications which re-connect using a lower SSL/TLS protocol version when the initial connection indicating the highest supported protocol version fails.

This can prevent a forceful downgrade of the communication to SSL 3.0. The SSL 3.0 protocol was found to be vulnerable to the padding oracle attack when using block cipher suites in cipher block chaining (CBC) mode. This issue is identified as CVE-2014-3566, and also known under the alias POODLE. This SSL 3.0 protocol flaw will not be addressed in a future update; it is recommended that users configure their applications to require at least TLS protocol version 1.0 for secure communication.

For additional information about this flaw, see the RedHat Knowledgebase article in the references.

A memory leak flaw was found in the way OpenSSL parsed the DTLS Secure Real-time Transport Protocol (SRTP) extension data. A remote attacker could send multiple specially crafted handshake messages to exhaust all available memory of an SSL/TLS or DTLS server (CVE-2014-3513).

A memory leak flaw was found in the way an OpenSSL handled failed session ticket integrity checks. A remote attacker could exhaust all available memory of an SSL/TLS or DTLS server by sending a large number of invalid session tickets to that server (CVE-2014-3567).

Record
MGASA-2014-0416
Updated
2026-11-02
OSVopenSUSE-SU-2024:10271-1 No score

libopenssl-devel-1.0.2j-2.2 on GA media

These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10271-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10529-1 No score

libopenssl1_0_0-steam-1.0.2h-4.1 on GA media

These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10529-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11127-1 No score

libopenssl-1_1-devel-1.1.1l-1.2 on GA media

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11127-1
Updated
2026-11-02
OSVSUSE-FU-2022:0445-1 No score

Feature update for venv-salt-minion

This feature update for venv-salt-minion provides the following changes:

  • Introduce venv-salt-minion.
  • Mention fixed issues provided with the bundle.
Record
SUSE-FU-2022:0445-1
Updated
2026-11-02
OSVSUSE-RU-2015:0769-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-RU-2015:0769-1
Updated
2026-11-02
OSVSUSE-SU-2015:0545-1 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>
Record
SUSE-SU-2015:0545-1
Updated
2026-11-02
OSVSUSE-SU-2015:0545-2 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:0545-2
Updated
2026-11-02
OSVSUSE-SU-2015:0546-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:0546-1
Updated
2026-11-02
OSVSUSE-SU-2015:1182-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:1182-1
Updated
2026-11-02
OSVSUSE-SU-2015:1182-2 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:1182-2
Updated
2026-11-02
OSVSUSE-SU-2015:1184-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:1184-1
Updated
2026-11-02
OSVSUSE-SU-2015:1184-2 No score

Security update for OpenSSL

OpenSSL has been updated to fix several security issues:

* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
  compression by default. Setting the environment variable
  'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
  local attackers to gain access to transmitted plain text or private
  keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.

Security Issue references:

* CVE-2013-0169
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>
Record
SUSE-SU-2015:1184-2
Updated
2026-11-02
OSVSUSE-SU-2015:1185-1 No score

Security update for openssl1

This OpenSSL update fixes the following issues:

* SRTP Memory Leak (CVE-2014-3513)
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513>
* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-2015:1185-1
Updated
2026-11-02
OSVSUSE-SU-403 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403
Updated
2026-11-02
OSVSUSE-SU-403 Forbidden-1 No score

Security update for OpenSSL

This OpenSSL update fixes the following issues:

* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)

Security Issues:

* CVE-2014-3567
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
Record
SUSE-SU-403 Forbidden-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-3567 No score

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Record
UBUNTU-CVE-2014-3567
Updated
2026-11-02
OSVUSN-2385-1 No score

openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled memory when parsing DTLS SRTP extension data. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-3513)

It was discovered that OpenSSL incorrectly handled memory when verifying the integrity of a session ticket. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. (CVE-2014-3567)

In addition, this update introduces support for the TLS Fallback Signaling Cipher Suite Value (TLS_FALLBACK_SCSV). This new feature prevents protocol downgrade attacks when certain applications such as web browsers attempt to reconnect using a lower protocol version for interoperability reasons.

Record
USN-2385-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssl
Debian:12
 before 1.0.1j-1
1.0.1j-1
openssl
Debian:13
 before 1.0.1j-1
1.0.1j-1
openssl
Debian:14
 before 1.0.1j-1
1.0.1j-1
openssl
Debian:6.0
 before 0.9.8o-4squeeze18, plus listed versions
0.9.8o-40.9.8o-4squeeze10.9.8o-4squeeze110.9.8o-4squeeze120.9.8o-4squeeze13
Show 12 moreShow less
0.9.8o-4squeeze140.9.8o-4squeeze150.9.8o-4squeeze160.9.8o-4squeeze170.9.8o-4squeeze20.9.8o-4squeeze30.9.8o-4squeeze40.9.8o-4squeeze4~bpo50+10.9.8o-4squeeze50.9.8o-4squeeze70.9.8o-4squeeze80.9.8o-4squeeze9
0.9.8o-4squeeze18
openssl
Debian:7
 before 1.0.1e-2+deb7u13, plus listed versions
1.0.1e-21.0.1e-2+deb7u11.0.1e-2+deb7u101.0.1e-2+deb7u111.0.1e-2+deb7u12
Show 8 moreShow less
1.0.1e-2+deb7u21.0.1e-2+deb7u31.0.1e-2+deb7u41.0.1e-2+deb7u51.0.1e-2+deb7u61.0.1e-2+deb7u71.0.1e-2+deb7u81.0.1e-2+deb7u9
1.0.1e-2+deb7u13
openssl
Mageia:3
 before 1.0.1e-1.11.mga3
1.0.1e-1.11.mga3
openssl
Mageia:4
 before 1.0.1e-8.8.mga4
1.0.1e-8.8.mga4
openssl
Red Hat:enterprise_linux:6::client
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-devel
Red Hat:enterprise_linux:6::client
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
Show 75 moreShow less
Affected packages
PackageAffectedFixed
openssl-perl
Red Hat:enterprise_linux:6::client
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-static
Red Hat:enterprise_linux:6::client
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-perl
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-static
Red Hat:enterprise_linux:6::computenode
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl
Red Hat:enterprise_linux:6::server
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-devel
Red Hat:enterprise_linux:6::server
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-perl
Red Hat:enterprise_linux:6::server
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-static
Red Hat:enterprise_linux:6::server
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-perl
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-static
Red Hat:enterprise_linux:6::workstation
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl
Red Hat:enterprise_linux:7::client
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-debuginfo
Red Hat:enterprise_linux:7::client
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-libs
Red Hat:enterprise_linux:7::client
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-devel
Red Hat:enterprise_linux:7::client
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-perl
Red Hat:enterprise_linux:7::client
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-static
Red Hat:enterprise_linux:7::client
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-libs
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-devel
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-perl
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-static
Red Hat:enterprise_linux:7::computenode
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl
Red Hat:enterprise_linux:7::server
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-debuginfo
Red Hat:enterprise_linux:7::server
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-devel
Red Hat:enterprise_linux:7::server
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-libs
Red Hat:enterprise_linux:7::server
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-perl
Red Hat:enterprise_linux:7::server
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-static
Red Hat:enterprise_linux:7::server
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-devel
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-libs
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-perl
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl-static
Red Hat:enterprise_linux:7::workstation
 before 1:1.0.1e-34.el7_0.6
1:1.0.1e-34.el7_0.6
openssl
Red Hat:storage:2.1:server:el6
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-debuginfo
Red Hat:storage:2.1:server:el6
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-devel
Red Hat:storage:2.1:server:el6
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-perl
Red Hat:storage:2.1:server:el6
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
openssl-static
Red Hat:storage:2.1:server:el6
 before 0:1.0.1e-30.el6_6.2
0:1.0.1e-30.el6_6.2
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.6-20150123.1.el6ev
0:6.6-20150123.1.el6ev
libqt4
SUSE:Linux Enterprise Desktop 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Desktop 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Desktop 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server 12 SP1
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-devel-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.8.6-7.3
4.8.6-7.3
libqt4-sql-plugins
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12
 before 4.8.6-7.1
4.8.6-7.1
libqt4
SUSE:Linux Enterprise Workstation Extension 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
libqt4-sql-plugins
SUSE:Linux Enterprise Workstation Extension 12 SP1
 before 4.8.6-7.1
4.8.6-7.1
openssl
Ubuntu:14.04:LTS
 before 1.0.1f-1ubuntu2.7, plus listed versions
1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu4
Show 7 moreShow less
1.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.11.0.1f-1ubuntu2.21.0.1f-1ubuntu2.31.0.1f-1ubuntu2.41.0.1f-1ubuntu2.5
1.0.1f-1ubuntu2.7
openssl-1_1
openSUSE:Tumbleweed
 before 1.1.1l-1.2
1.1.1l-1.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-3567 is a high vulnerability (CVSS 7.1) in Openssl, published March 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 22.7%, the 97th percentile. Fixed in openssl 1.0.1j-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 640 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open