{"id":"CVE-2014-3511","aliases":["BELL-CVE-2014-3511","DEBIAN-CVE-2014-3511","DSA-2998-1","EUVD-2014-3512","GHSA-xfjr-6mmm-7hc7","MGASA-2014-0325","RHSA-2014:1052","RHSA-2014:1054","RHSA-2015:0126","RHSA-2015:0197","SUSE-FU-2022:0445-1","SUSE-RU-2015:0769-1","SUSE-SU-2015:0546-1","SUSE-SU-2015:1185-1","UBUNTU-CVE-2014-3511","USN-2308-1","openSUSE-SU-2024:10271-1","openSUSE-SU-2024:10309-1","openSUSE-SU-2024:10529-1","openSUSE-SU-2024:11127-1"],"status":"published","title":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.14129,"percentile":0.96599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-08-07T00:00:00Z","modified":"2026-10-23T15:47:23Z","fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.0.1i-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.0.1i-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.0.1i-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1i-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-2+deb7u12"}]}],"versions":["1.0.1e-2","1.0.1e-2+deb7u1","1.0.1e-2+deb7u10","1.0.1e-2+deb7u11","1.0.1e-2+deb7u2","1.0.1e-2+deb7u3","1.0.1e-2+deb7u4","1.0.1e-2+deb7u5","1.0.1e-2+deb7u6","1.0.1e-2+deb7u7","1.0.1e-2+deb7u8","1.0.1e-2+deb7u9"],"bundled":9},{"source":"osv","ecosystem":"Mageia:3","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-1.10.mga3"}]}],"bundled":9},{"source":"osv","ecosystem":"Mageia:4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-8.7.mga4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-34.el7_0.4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-16.el6_5.15"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::hypervisor","package":"rhev-hypervisor6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6-20150123.1.el6ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-spice-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5-2.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-spice-client-x64-cab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5-2.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-spice-client-x64-msi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5-2.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-spice-client-x86-cab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5-2.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-spice-client-x86-msi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5-2.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.5"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.5"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libressl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-1.2"}]}],"bundled":136}],"products":[{"vendor":"openssl","product":"openssl"}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://linux.oracle.com/errata/ELSA-2014-1052.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/60221","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682293","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61184","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142660345230545\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://secunia.com/advisories/60022","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://www.openssl.org/news/secadv_20140806.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article","report"]},{"url":"http://secunia.com/advisories/61017","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0197.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60377","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142350350616251\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://secunia.com/advisories/59887","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683389","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142791032306609\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60890","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201412-39.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15564.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142495837901899\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://secunia.com/advisories/60803","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/59700","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1030693","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95162","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.splunk.com/view/SP-CAAANHS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/60917","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.tenable.com/security/tns-2014-06","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred","advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10084","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/60493","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/59710","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60921","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/69079","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/61043","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60810","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=280b1f1ad12131defcd986676a8fc9717aaa601b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61100","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/61775","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2014/dsa-2998","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143290437727362\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/61959","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/59756","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127504","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142624590206005\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143290522027658\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/58962","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.arubanetworks.com/support/alerts/aid-08182014.txt","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/60938","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/60684","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://support.citrix.com/article/CTX216642","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://techzone.ergon.ch/CVE-2014-3511","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21686997","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/61139","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3511","tags":["advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=280b1f1ad12131defcd986676a8fc9717aaa601b"},{"url":"https://github.com/advisories/GHSA-xfjr-6mmm-7hc7"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-3511","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3511","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0325.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13874","tags":["report"]},{"url":"http://www.openssl.org/news/secadv_20140806.txt","tags":["web"]},{"url":"https://www.debian.org/security/2014/dsa-2998","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1052","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127503","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1052.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3505","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3506","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3506","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3506","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3507","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3507","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3507","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3508","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3509","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3509","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3510","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3510","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3510","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3511","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1054","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1054.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0126","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1152563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1152961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1183461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185720","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0126.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3567","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3567","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3567","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv_20141015.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3646","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3646","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3646","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0235","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/ghost","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0235","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0235","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/01/27/9","tags":["article"]},{"url":"https://access.redhat.com/articles/1332213","tags":["article"]},{"url":"https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0197","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1018145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1018182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1090433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1105650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115445","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0197.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000080","tags":["report"]},{"url":"https://bugzilla.suse.com/1000117","tags":["report"]},{"url":"https://bugzilla.suse.com/1000194","tags":["report"]},{"url":"https://bugzilla.suse.com/1000677","tags":["report"]},{"url":"https://bugzilla.suse.com/1000742","tags":["report"]},{"url":"https://bugzilla.suse.com/1001148","tags":["report"]},{"url":"https://bugzilla.suse.com/1001912","tags":["report"]},{"url":"https://bugzilla.suse.com/1002585","tags":["report"]},{"url":"https://bugzilla.suse.com/1002895","tags":["report"]},{"url":"https://bugzilla.suse.com/1003091","tags":["report"]},{"url":"https://bugzilla.suse.com/1005246","tags":["report"]},{"url":"https://bugzilla.suse.com/1009528","tags":["report"]},{"url":"https://bugzilla.suse.com/1010874","tags":["report"]},{"url":"https://bugzilla.suse.com/1010966","tags":["report"]},{"url":"https://bugzilla.suse.com/1011936","tags":["report"]},{"url":"https://bugzilla.suse.com/1015549","tags":["report"]},{"url":"https://bugzilla.suse.com/1019637","tags":["report"]},{"url":"https://bugzilla.suse.com/1021641","tags":["report"]},{"url":"https://bugzilla.suse.com/1022085","tags":["report"]},{"url":"https://bugzilla.suse.com/1022086","tags":["report"]},{"url":"https://bugzilla.suse.com/1022271","tags":["report"]},{"url":"https://bugzilla.suse.com/1027079","tags":["report"]},{"url":"https://bugzilla.suse.com/1027610","tags":["report"]},{"url":"https://bugzilla.suse.com/1027688","tags":["report"]},{"url":"https://bugzilla.suse.com/1027705","tags":["report"]},{"url":"https://bugzilla.suse.com/1027908","tags":["report"]},{"url":"https://bugzilla.suse.com/1028281","tags":["report"]},{"url":"https://bugzilla.suse.com/1028723","tags":["report"]},{"url":"https://bugzilla.suse.com/1029523","tags":["report"]},{"url":"https://bugzilla.suse.com/1029902","tags":["report"]},{"url":"https://bugzilla.suse.com/1030038","tags":["report"]},{"url":"https://bugzilla.suse.com/1032118","tags":["report"]},{"url":"https://bugzilla.suse.com/1032119","tags":["report"]},{"url":"https://bugzilla.suse.com/1035604","tags":["report"]},{"url":"https://bugzilla.suse.com/1039469","tags":["report"]},{"url":"https://bugzilla.suse.com/1040164","tags":["report"]},{"url":"https://bugzilla.suse.com/1040256","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042392","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1044095","tags":["report"]},{"url":"https://bugzilla.suse.com/1044107","tags":["report"]},{"url":"https://bugzilla.suse.com/1044175","tags":["report"]},{"url":"https://bugzilla.suse.com/1049186","tags":["report"]},{"url":"https://bugzilla.suse.com/1049304","tags":["report"]},{"url":"https://bugzilla.suse.com/1050653","tags":["report"]},{"url":"https://bugzilla.suse.com/1050665","tags":["report"]},{"url":"https://bugzilla.suse.com/1055478","tags":["report"]},{"url":"https://bugzilla.suse.com/1055542","tags":["report"]},{"url":"https://bugzilla.suse.com/1055825","tags":["report"]},{"url":"https://bugzilla.suse.com/1056058","tags":["report"]},{"url":"https://bugzilla.suse.com/1056951","tags":["report"]},{"url":"https://bugzilla.suse.com/1057496","tags":["report"]},{"url":"https://bugzilla.suse.com/1062237","tags":["report"]},{"url":"https://bugzilla.suse.com/1065363","tags":["report"]},{"url":"https://bugzilla.suse.com/1066242","tags":["report"]},{"url":"https://bugzilla.suse.com/1066873","tags":["report"]},{"url":"https://bugzilla.suse.com/1068790","tags":["report"]},{"url":"https://bugzilla.suse.com/1070737","tags":["report"]},{"url":"https://bugzilla.suse.com/1070738","tags":["report"]},{"url":"https://bugzilla.suse.com/1070853","tags":["report"]},{"url":"https://bugzilla.suse.com/1071905","tags":["report"]},{"url":"https://bugzilla.suse.com/1071906","tags":["report"]},{"url":"https://bugzilla.suse.com/1071941","tags":["report"]},{"url":"https://bugzilla.suse.com/1073310","tags":["report"]},{"url":"https://bugzilla.suse.com/1073845","tags":["report"]},{"url":"https://bugzilla.suse.com/1073879","tags":["report"]},{"url":"https://bugzilla.suse.com/1074247","tags":["report"]},{"url":"https://bugzilla.suse.com/1076519","tags":["report"]},{"url":"https://bugzilla.suse.com/1077096","tags":["report"]},{"url":"https://bugzilla.suse.com/1077230","tags":["report"]},{"url":"https://bugzilla.suse.com/1078329","tags":["report"]},{"url":"https://bugzilla.suse.com/1079761","tags":["report"]},{"url":"https://bugzilla.suse.com/1080301","tags":["report"]},{"url":"https://bugzilla.suse.com/1081005","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1081751","tags":["report"]},{"url":"https://bugzilla.suse.com/1082155","tags":["report"]},{"url":"https://bugzilla.suse.com/1082163","tags":["report"]},{"url":"https://bugzilla.suse.com/1082318","tags":["report"]},{"url":"https://bugzilla.suse.com/1083826","tags":["report"]},{"url":"https://bugzilla.suse.com/1084117","tags":["report"]},{"url":"https://bugzilla.suse.com/1084157","tags":["report"]},{"url":"https://bugzilla.suse.com/1085276","tags":["report"]},{"url":"https://bugzilla.suse.com/1085529","tags":["report"]},{"url":"https://bugzilla.suse.com/1085661","tags":["report"]},{"url":"https://bugzilla.suse.com/1087102","tags":["report"]},{"url":"https://bugzilla.suse.com/1087104","tags":["report"]},{"url":"https://bugzilla.suse.com/1088573","tags":["report"]},{"url":"https://bugzilla.suse.com/1089039","tags":["report"]},{"url":"https://bugzilla.suse.com/1090427","tags":["report"]},{"url":"https://bugzilla.suse.com/1090765","tags":["report"]},{"url":"https://bugzilla.suse.com/1090953","tags":["report"]},{"url":"https://bugzilla.suse.com/1093518","tags":["report"]},{"url":"https://bugzilla.suse.com/1093917","tags":["report"]},{"url":"https://bugzilla.suse.com/1094788","tags":["report"]},{"url":"https://bugzilla.suse.com/1094814","tags":["report"]},{"url":"https://bugzilla.suse.com/1094883","tags":["report"]},{"url":"https://bugzilla.suse.com/1095267","tags":["report"]},{"url":"https://bugzilla.suse.com/1096738","tags":["report"]},{"url":"https://bugzilla.suse.com/1096937","tags":["report"]},{"url":"https://bugzilla.suse.com/1097158","tags":["report"]},{"url":"https://bugzilla.suse.com/1097531","tags":["report"]},{"url":"https://bugzilla.suse.com/1097624","tags":["report"]},{"url":"https://bugzilla.suse.com/1098535","tags":["report"]},{"url":"https://bugzilla.suse.com/1098592","tags":["report"]},{"url":"https://bugzilla.suse.com/1099308","tags":["report"]},{"url":"https://bugzilla.suse.com/1099569","tags":["report"]},{"url":"https://bugzilla.suse.com/1100078","tags":["report"]},{"url":"https://bugzilla.suse.com/1101246","tags":["report"]},{"url":"https://bugzilla.suse.com/1101470","tags":["report"]},{"url":"https://bugzilla.suse.com/1102868","tags":["report"]},{"url":"https://bugzilla.suse.com/1104789","tags":["report"]},{"url":"https://bugzilla.suse.com/1106197","tags":["report"]},{"url":"https://bugzilla.suse.com/1108508","tags":["report"]},{"url":"https://bugzilla.suse.com/1109882","tags":["report"]},{"url":"https://bugzilla.suse.com/1109998","tags":["report"]},{"url":"https://bugzilla.suse.com/1110435","tags":["report"]},{"url":"https://bugzilla.suse.com/1110869","tags":["report"]},{"url":"https://bugzilla.suse.com/1110871","tags":["report"]},{"url":"https://bugzilla.suse.com/1111493","tags":["report"]},{"url":"https://bugzilla.suse.com/1111622","tags":["report"]},{"url":"https://bugzilla.suse.com/1111657","tags":["report"]},{"url":"https://bugzilla.suse.com/1112209","tags":["report"]},{"url":"https://bugzilla.suse.com/1112357","tags":["report"]},{"url":"https://bugzilla.suse.com/1113534","tags":["report"]},{"url":"https://bugzilla.suse.com/1113652","tags":["report"]},{"url":"https://bugzilla.suse.com/1113742","tags":["report"]},{"url":"https://bugzilla.suse.com/1113975","tags":["report"]},{"url":"https://bugzilla.suse.com/1115769","tags":["report"]},{"url":"https://bugzilla.suse.com/1117951","tags":["report"]},{"url":"https://bugzilla.suse.com/1118611","tags":["report"]},{"url":"https://bugzilla.suse.com/1119376","tags":["report"]},{"url":"https://bugzilla.suse.com/1119416","tags":["report"]},{"url":"https://bugzilla.suse.com/1119792","tags":["report"]},{"url":"https://bugzilla.suse.com/1121717","tags":["report"]},{"url":"https://bugzilla.suse.com/1121852","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1123064","tags":["report"]},{"url":"https://bugzilla.suse.com/1123185","tags":["report"]},{"url":"https://bugzilla.suse.com/1123186","tags":["report"]},{"url":"https://bugzilla.suse.com/1123558","tags":["report"]},{"url":"https://bugzilla.suse.com/1124885","tags":["report"]},{"url":"https://bugzilla.suse.com/1125815","tags":["report"]},{"url":"https://bugzilla.suse.com/1126283","tags":["report"]},{"url":"https://bugzilla.suse.com/1126318","tags":["report"]},{"url":"https://bugzilla.suse.com/1127080","tags":["report"]},{"url":"https://bugzilla.suse.com/1127173","tags":["report"]},{"url":"https://bugzilla.suse.com/1128146","tags":["report"]},{"url":"https://bugzilla.suse.com/1128323","tags":["report"]},{"url":"https://bugzilla.suse.com/1128355","tags":["report"]},{"url":"https://bugzilla.suse.com/1129071","tags":["report"]},{"url":"https://bugzilla.suse.com/1129566","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1131291","tags":["report"]},{"url":"https://bugzilla.suse.com/1132174","tags":["report"]},{"url":"https://bugzilla.suse.com/1132323","tags":["report"]},{"url":"https://bugzilla.suse.com/1132455","tags":["report"]},{"url":"https://bugzilla.suse.com/1132663","tags":["report"]},{"url":"https://bugzilla.suse.com/1132900","tags":["report"]},{"url":"https://bugzilla.suse.com/1135009","tags":["report"]},{"url":"https://bugzilla.suse.com/1136444","tags":["report"]},{"url":"https://bugzilla.suse.com/1138666","tags":["report"]},{"url":"https://bugzilla.suse.com/1138715","tags":["report"]},{"url":"https://bugzilla.suse.com/1138746","tags":["report"]},{"url":"https://bugzilla.suse.com/1139915","tags":["report"]},{"url":"https://bugzilla.suse.com/1140255","tags":["report"]},{"url":"https://bugzilla.suse.com/1141168","tags":["report"]},{"url":"https://bugzilla.suse.com/1142899","tags":["report"]},{"url":"https://bugzilla.suse.com/1143033","tags":["report"]},{"url":"https://bugzilla.suse.com/1143454","tags":["report"]},{"url":"https://bugzilla.suse.com/1143893","tags":["report"]},{"url":"https://bugzilla.suse.com/1144506","tags":["report"]},{"url":"https://bugzilla.suse.com/1149686","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1150003","tags":["report"]},{"url":"https://bugzilla.suse.com/1150190","tags":["report"]},{"url":"https://bugzilla.suse.com/1150250","tags":["report"]},{"url":"https://bugzilla.suse.com/1150895","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1155815","tags":["report"]},{"url":"https://bugzilla.suse.com/1156677","tags":["report"]},{"url":"https://bugzilla.suse.com/1156694","tags":["report"]},{"url":"https://bugzilla.suse.com/1156908","tags":["report"]},{"url":"https://bugzilla.suse.com/1157104","tags":["report"]},{"url":"https://bugzilla.suse.com/1157354","tags":["report"]},{"url":"https://bugzilla.suse.com/1158809","tags":["report"]},{"url":"https://bugzilla.suse.com/1159235","tags":["report"]},{"url":"https://bugzilla.suse.com/1159538","tags":["report"]},{"url":"https://bugzilla.suse.com/1160163","tags":["report"]},{"url":"https://bugzilla.suse.com/1161557","tags":["report"]},{"url":"https://bugzilla.suse.com/1161770","tags":["report"]},{"url":"https://bugzilla.suse.com/1162224","tags":["report"]},{"url":"https://bugzilla.suse.com/1162367","tags":["report"]},{"url":"https://bugzilla.suse.com/1162743","tags":["report"]},{"url":"https://bugzilla.suse.com/1163978","tags":["report"]},{"url":"https://bugzilla.suse.com/1164310","tags":["report"]},{"url":"https://bugzilla.suse.com/1165439","tags":["report"]},{"url":"https://bugzilla.suse.com/1165578","tags":["report"]},{"url":"https://bugzilla.suse.com/1165730","tags":["report"]},{"url":"https://bugzilla.suse.com/1165823","tags":["report"]},{"url":"https://bugzilla.suse.com/1165960","tags":["report"]},{"url":"https://bugzilla.suse.com/1166139","tags":["report"]},{"url":"https://bugzilla.suse.com/1166758","tags":["report"]},{"url":"https://bugzilla.suse.com/1167008","tags":["report"]},{"url":"https://bugzilla.suse.com/1167501","tags":["report"]},{"url":"https://bugzilla.suse.com/1167732","tags":["report"]},{"url":"https://bugzilla.suse.com/1167746","tags":["report"]},{"url":"https://bugzilla.suse.com/1168480","tags":["report"]},{"url":"https://bugzilla.suse.com/1168973","tags":["report"]},{"url":"https://bugzilla.suse.com/1169489","tags":["report"]},{"url":"https://bugzilla.suse.com/1170175","tags":["report"]},{"url":"https://bugzilla.suse.com/1170863","tags":["report"]},{"url":"https://bugzilla.suse.com/1171368","tags":["report"]},{"url":"https://bugzilla.suse.com/1171561","tags":["report"]},{"url":"https://bugzilla.suse.com/1172226","tags":["report"]},{"url":"https://bugzilla.suse.com/1172908","tags":["report"]},{"url":"https://bugzilla.suse.com/1172928","tags":["report"]},{"url":"https://bugzilla.suse.com/1173226","tags":["report"]},{"url":"https://bugzilla.suse.com/1173356","tags":["report"]},{"url":"https://bugzilla.suse.com/1174009","tags":["report"]},{"url":"https://bugzilla.suse.com/1174091","tags":["report"]},{"url":"https://bugzilla.suse.com/1174514","tags":["report"]},{"url":"https://bugzilla.suse.com/1175729","tags":["report"]},{"url":"https://bugzilla.suse.com/1176116","tags":["report"]},{"url":"https://bugzilla.suse.com/1176129","tags":["report"]},{"url":"https://bugzilla.suse.com/1176134","tags":["report"]},{"url":"https://bugzilla.suse.com/1176232","tags":["report"]},{"url":"https://bugzilla.suse.com/1176256","tags":["report"]},{"url":"https://bugzilla.suse.com/1176257","tags":["report"]},{"url":"https://bugzilla.suse.com/1176258","tags":["report"]},{"url":"https://bugzilla.suse.com/1176259","tags":["report"]},{"url":"https://bugzilla.suse.com/1176262","tags":["report"]},{"url":"https://bugzilla.suse.com/1176389","tags":["report"]},{"url":"https://bugzilla.suse.com/1176785","tags":["report"]},{"url":"https://bugzilla.suse.com/1176977","tags":["report"]},{"url":"https://bugzilla.suse.com/1177120","tags":["report"]},{"url":"https://bugzilla.suse.com/1177127","tags":["report"]},{"url":"https://bugzilla.suse.com/1177559","tags":["report"]},{"url":"https://bugzilla.suse.com/1178168","tags":["report"]},{"url":"https://bugzilla.suse.com/1178341","tags":["report"]},{"url":"https://bugzilla.suse.com/1178670","tags":["report"]},{"url":"https://bugzilla.suse.com/1179491","tags":["report"]},{"url":"https://bugzilla.suse.com/1179562","tags":["report"]},{"url":"https://bugzilla.suse.com/1179630","tags":["report"]},{"url":"https://bugzilla.suse.com/1179805","tags":["report"]},{"url":"https://bugzilla.suse.com/1180125","tags":["report"]},{"url":"https://bugzilla.suse.com/1180781","tags":["report"]},{"url":"https://bugzilla.suse.com/1181126","tags":["report"]},{"url":"https://bugzilla.suse.com/1181324","tags":["report"]},{"url":"https://bugzilla.suse.com/1181944","tags":["report"]},{"url":"https://bugzilla.suse.com/1182066","tags":["report"]},{"url":"https://bugzilla.suse.com/1182211","tags":["report"]},{"url":"https://bugzilla.suse.com/1182244","tags":["report"]},{"url":"https://bugzilla.suse.com/1182264","tags":["report"]},{"url":"https://bugzilla.suse.com/1182331","tags":["report"]},{"url":"https://bugzilla.suse.com/1182333","tags":["report"]},{"url":"https://bugzilla.suse.com/1182379","tags":["report"]},{"url":"https://bugzilla.suse.com/1182963","tags":["report"]},{"url":"https://bugzilla.suse.com/1183059","tags":["report"]},{"url":"https://bugzilla.suse.com/1183374","tags":["report"]},{"url":"https://bugzilla.suse.com/1183858","tags":["report"]},{"url":"https://bugzilla.suse.com/1184505","tags":["report"]},{"url":"https://bugzilla.suse.com/1185588","tags":["report"]},{"url":"https://bugzilla.suse.com/1185706","tags":["report"]},{"url":"https://bugzilla.suse.com/1185748","tags":["report"]},{"url":"https://bugzilla.suse.com/1186738","tags":["report"]},{"url":"https://bugzilla.suse.com/1187045","tags":["report"]},{"url":"https://bugzilla.suse.com/1189521","tags":["report"]},{"url":"https://bugzilla.suse.com/1190781","tags":["report"]},{"url":"https://bugzilla.suse.com/1193357","tags":["report"]},{"url":"https://bugzilla.suse.com/356549","tags":["report"]},{"url":"https://bugzilla.suse.com/381844","tags":["report"]},{"url":"https://bugzilla.suse.com/394317","tags":["report"]},{"url":"https://bugzilla.suse.com/408865","tags":["report"]},{"url":"https://bugzilla.suse.com/428177","tags":["report"]},{"url":"https://bugzilla.suse.com/430141","tags":["report"]},{"url":"https://bugzilla.suse.com/431945","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/442740","tags":["report"]},{"url":"https://bugzilla.suse.com/459468","tags":["report"]},{"url":"https://bugzilla.suse.com/489641","tags":["report"]},{"url":"https://bugzilla.suse.com/504687","tags":["report"]},{"url":"https://bugzilla.suse.com/509031","tags":["report"]},{"url":"https://bugzilla.suse.com/526319","tags":["report"]},{"url":"https://bugzilla.suse.com/590833","tags":["report"]},{"url":"https://bugzilla.suse.com/610223","tags":["report"]},{"url":"https://bugzilla.suse.com/610642","tags":["report"]},{"url":"https://bugzilla.suse.com/629905","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/651003","tags":["report"]},{"url":"https://bugzilla.suse.com/657698","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/670526","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/693027","tags":["report"]},{"url":"https://bugzilla.suse.com/715423","tags":["report"]},{"url":"https://bugzilla.suse.com/720601","tags":["report"]},{"url":"https://bugzilla.suse.com/743787","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/748738","tags":["report"]},{"url":"https://bugzilla.suse.com/749210","tags":["report"]},{"url":"https://bugzilla.suse.com/749213","tags":["report"]},{"url":"https://bugzilla.suse.com/749735","tags":["report"]},{"url":"https://bugzilla.suse.com/750618","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/751946","tags":["report"]},{"url":"https://bugzilla.suse.com/751977","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/754677","tags":["report"]},{"url":"https://bugzilla.suse.com/761500","tags":["report"]},{"url":"https://bugzilla.suse.com/774710","tags":["report"]},{"url":"https://bugzilla.suse.com/784670","tags":["report"]},{"url":"https://bugzilla.suse.com/784994","tags":["report"]},{"url":"https://bugzilla.suse.com/787526","tags":["report"]},{"url":"https://bugzilla.suse.com/793420","tags":["report"]},{"url":"https://bugzilla.suse.com/799119","tags":["report"]},{"url":"https://bugzilla.suse.com/802184","tags":["report"]},{"url":"https://bugzilla.suse.com/803004","tags":["report"]},{"url":"https://bugzilla.suse.com/809831","tags":["report"]},{"url":"https://bugzilla.suse.com/811890","tags":["report"]},{"url":"https://bugzilla.suse.com/822642","tags":["report"]},{"url":"https://bugzilla.suse.com/825221","tags":["report"]},{"url":"https://bugzilla.suse.com/828513","tags":["report"]},{"url":"https://bugzilla.suse.com/831629","tags":["report"]},{"url":"https://bugzilla.suse.com/832833","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/835687","tags":["report"]},{"url":"https://bugzilla.suse.com/839107","tags":["report"]},{"url":"https://bugzilla.suse.com/84331","tags":["report"]},{"url":"https://bugzilla.suse.com/849377","tags":["report"]},{"url":"https://bugzilla.suse.com/855666","tags":["report"]},{"url":"https://bugzilla.suse.com/855676","tags":["report"]},{"url":"https://bugzilla.suse.com/856687","tags":["report"]},{"url":"https://bugzilla.suse.com/857203","tags":["report"]},{"url":"https://bugzilla.suse.com/857850","tags":["report"]},{"url":"https://bugzilla.suse.com/858239","tags":["report"]},{"url":"https://bugzilla.suse.com/867887","tags":["report"]},{"url":"https://bugzilla.suse.com/869945","tags":["report"]},{"url":"https://bugzilla.suse.com/871152","tags":["report"]},{"url":"https://bugzilla.suse.com/872299","tags":["report"]},{"url":"https://bugzilla.suse.com/873351","tags":["report"]},{"url":"https://bugzilla.suse.com/876282","tags":["report"]},{"url":"https://bugzilla.suse.com/876710","tags":["report"]},{"url":"https://bugzilla.suse.com/876712","tags":["report"]},{"url":"https://bugzilla.suse.com/876748","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/885662","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/889013","tags":["report"]},{"url":"https://bugzilla.suse.com/889363","tags":["report"]},{"url":"https://bugzilla.suse.com/892477","tags":["report"]},{"url":"https://bugzilla.suse.com/892480","tags":["report"]},{"url":"https://bugzilla.suse.com/895129","tags":["report"]},{"url":"https://bugzilla.suse.com/898917","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901277","tags":["report"]},{"url":"https://bugzilla.suse.com/901902","tags":["report"]},{"url":"https://bugzilla.suse.com/902364","tags":["report"]},{"url":"https://bugzilla.suse.com/906878","tags":["report"]},{"url":"https://bugzilla.suse.com/907584","tags":["report"]},{"url":"https://bugzilla.suse.com/908362","tags":["report"]},{"url":"https://bugzilla.suse.com/908372","tags":["report"]},{"url":"https://bugzilla.suse.com/912014","tags":["report"]},{"url":"https://bugzilla.suse.com/912015","tags":["report"]},{"url":"https://bugzilla.suse.com/912018","tags":["report"]},{"url":"https://bugzilla.suse.com/912292","tags":["report"]},{"url":"https://bugzilla.suse.com/912293","tags":["report"]},{"url":"https://bugzilla.suse.com/912294","tags":["report"]},{"url":"https://bugzilla.suse.com/912296","tags":["report"]},{"url":"https://bugzilla.suse.com/912460","tags":["report"]},{"url":"https://bugzilla.suse.com/913229","tags":["report"]},{"url":"https://bugzilla.suse.com/915479","tags":["report"]},{"url":"https://bugzilla.suse.com/917607","tags":["report"]},{"url":"https://bugzilla.suse.com/917759","tags":["report"]},{"url":"https://bugzilla.suse.com/917815","tags":["report"]},{"url":"https://bugzilla.suse.com/919648","tags":["report"]},{"url":"https://bugzilla.suse.com/920236","tags":["report"]},{"url":"https://bugzilla.suse.com/922448","tags":["report"]},{"url":"https://bugzilla.suse.com/922488","tags":["report"]},{"url":"https://bugzilla.suse.com/922496","tags":["report"]},{"url":"https://bugzilla.suse.com/922499","tags":["report"]},{"url":"https://bugzilla.suse.com/922500","tags":["report"]},{"url":"https://bugzilla.suse.com/926597","tags":["report"]},{"url":"https://bugzilla.suse.com/929678","tags":["report"]},{"url":"https://bugzilla.suse.com/929736","tags":["report"]},{"url":"https://bugzilla.suse.com/930189","tags":["report"]},{"url":"https://bugzilla.suse.com/931698","tags":["report"]},{"url":"https://bugzilla.suse.com/931978","tags":["report"]},{"url":"https://bugzilla.suse.com/933898","tags":["report"]},{"url":"https://bugzilla.suse.com/933911","tags":["report"]},{"url":"https://bugzilla.suse.com/934487","tags":["report"]},{"url":"https://bugzilla.suse.com/934489","tags":["report"]},{"url":"https://bugzilla.suse.com/934491","tags":["report"]},{"url":"https://bugzilla.suse.com/934493","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://bugzilla.suse.com/937085","tags":["report"]},{"url":"https://bugzilla.suse.com/937212","tags":["report"]},{"url":"https://bugzilla.suse.com/937492","tags":["report"]},{"url":"https://bugzilla.suse.com/937634","tags":["report"]},{"url":"https://bugzilla.suse.com/937912","tags":["report"]},{"url":"https://bugzilla.suse.com/939456","tags":["report"]},{"url":"https://bugzilla.suse.com/940608","tags":["report"]},{"url":"https://bugzilla.suse.com/942385","tags":["report"]},{"url":"https://bugzilla.suse.com/942751","tags":["report"]},{"url":"https://bugzilla.suse.com/943421","tags":["report"]},{"url":"https://bugzilla.suse.com/944204","tags":["report"]},{"url":"https://bugzilla.suse.com/945455","tags":["report"]},{"url":"https://bugzilla.suse.com/946648","tags":["report"]},{"url":"https://bugzilla.suse.com/947104","tags":["report"]},{"url":"https://bugzilla.suse.com/947357","tags":["report"]},{"url":"https://bugzilla.suse.com/947679","tags":["report"]},{"url":"https://bugzilla.suse.com/948198","tags":["report"]},{"url":"https://bugzilla.suse.com/952871","tags":["report"]},{"url":"https://bugzilla.suse.com/954256","tags":["report"]},{"url":"https://bugzilla.suse.com/954486","tags":["report"]},{"url":"https://bugzilla.suse.com/954690","tags":["report"]},{"url":"https://bugzilla.suse.com/957812","tags":["report"]},{"url":"https://bugzilla.suse.com/957813","tags":["report"]},{"url":"https://bugzilla.suse.com/957815","tags":["report"]},{"url":"https://bugzilla.suse.com/958501","tags":["report"]},{"url":"https://bugzilla.suse.com/961334","tags":["report"]},{"url":"https://bugzilla.suse.com/962291","tags":["report"]},{"url":"https://bugzilla.suse.com/963415","tags":["report"]},{"url":"https://bugzilla.suse.com/963974","tags":["report"]},{"url":"https://bugzilla.suse.com/964204","tags":["report"]},{"url":"https://bugzilla.suse.com/964472","tags":["report"]},{"url":"https://bugzilla.suse.com/964474","tags":["report"]},{"url":"https://bugzilla.suse.com/965830","tags":["report"]},{"url":"https://bugzilla.suse.com/967128","tags":["report"]},{"url":"https://bugzilla.suse.com/968046","tags":["report"]},{"url":"https://bugzilla.suse.com/968047","tags":["report"]},{"url":"https://bugzilla.suse.com/968048","tags":["report"]},{"url":"https://bugzilla.suse.com/968050","tags":["report"]},{"url":"https://bugzilla.suse.com/968265","tags":["report"]},{"url":"https://bugzilla.suse.com/968270","tags":["report"]},{"url":"https://bugzilla.suse.com/968374","tags":["report"]},{"url":"https://bugzilla.suse.com/968601","tags":["report"]},{"url":"https://bugzilla.suse.com/975875","tags":["report"]},{"url":"https://bugzilla.suse.com/976942","tags":["report"]},{"url":"https://bugzilla.suse.com/977584","tags":["report"]},{"url":"https://bugzilla.suse.com/977614","tags":["report"]},{"url":"https://bugzilla.suse.com/977615","tags":["report"]},{"url":"https://bugzilla.suse.com/977616","tags":["report"]},{"url":"https://bugzilla.suse.com/977663","tags":["report"]},{"url":"https://bugzilla.suse.com/978224","tags":["report"]},{"url":"https://bugzilla.suse.com/981848","tags":["report"]},{"url":"https://bugzilla.suse.com/982268","tags":["report"]},{"url":"https://bugzilla.suse.com/982575","tags":["report"]},{"url":"https://bugzilla.suse.com/983249","tags":["report"]},{"url":"https://bugzilla.suse.com/984323","tags":["report"]},{"url":"https://bugzilla.suse.com/985054","tags":["report"]},{"url":"https://bugzilla.suse.com/988086","tags":["report"]},{"url":"https://bugzilla.suse.com/990207","tags":["report"]},{"url":"https://bugzilla.suse.com/990392","tags":["report"]},{"url":"https://bugzilla.suse.com/990419","tags":["report"]},{"url":"https://bugzilla.suse.com/990428","tags":["report"]},{"url":"https://bugzilla.suse.com/991193","tags":["report"]},{"url":"https://bugzilla.suse.com/991877","tags":["report"]},{"url":"https://bugzilla.suse.com/992120","tags":["report"]},{"url":"https://bugzilla.suse.com/992988","tags":["report"]},{"url":"https://bugzilla.suse.com/992989","tags":["report"]},{"url":"https://bugzilla.suse.com/992992","tags":["report"]},{"url":"https://bugzilla.suse.com/993130","tags":["report"]},{"url":"https://bugzilla.suse.com/993819","tags":["report"]},{"url":"https://bugzilla.suse.com/993825","tags":["report"]},{"url":"https://bugzilla.suse.com/993968","tags":["report"]},{"url":"https://bugzilla.suse.com/994749","tags":["report"]},{"url":"https://bugzilla.suse.com/994844","tags":["report"]},{"url":"https://bugzilla.suse.com/994910","tags":["report"]},{"url":"https://bugzilla.suse.com/995075","tags":["report"]},{"url":"https://bugzilla.suse.com/995324","tags":["report"]},{"url":"https://bugzilla.suse.com/995359","tags":["report"]},{"url":"https://bugzilla.suse.com/995377","tags":["report"]},{"url":"https://bugzilla.suse.com/995959","tags":["report"]},{"url":"https://bugzilla.suse.com/996255","tags":["report"]},{"url":"https://bugzilla.suse.com/997043","tags":["report"]},{"url":"https://bugzilla.suse.com/997614","tags":["report"]},{"url":"https://bugzilla.suse.com/998190","tags":["report"]},{"url":"https://bugzilla.suse.com/999665","tags":["report"]},{"url":"https://bugzilla.suse.com/999666","tags":["report"]},{"url":"https://bugzilla.suse.com/999668","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7202","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11324","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150769-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/860332","tags":["report"]},{"url":"https://bugzilla.suse.com/861014","tags":["report"]},{"url":"https://bugzilla.suse.com/864912","tags":["report"]},{"url":"https://bugzilla.suse.com/889812","tags":["report"]},{"url":"https://bugzilla.suse.com/890764","tags":["report"]},{"url":"https://bugzilla.suse.com/890767","tags":["report"]},{"url":"https://bugzilla.suse.com/890768","tags":["report"]},{"url":"https://bugzilla.suse.com/890769","tags":["report"]},{"url":"https://bugzilla.suse.com/890770","tags":["report"]},{"url":"https://bugzilla.suse.com/922501","tags":["report"]},{"url":"https://bugzilla.suse.com/923384","tags":["report"]},{"url":"https://bugzilla.suse.com/934494","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0292","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151185-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3511","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2308-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3505","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3507","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3509","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3510","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-5139","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3711","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-3511","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","status":"published","published":"2014-08-13T23:00:00Z","modified":"2024-08-06T10:43:06.344Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2014-3512","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","status":"published","published":"2014-08-13T23:00:00Z","modified":"2024-08-06T10:43:06Z","updated_at":"2026-11-03T01:57:10.446744Z"}],"ghsa":[{"id":"GHSA-xfjr-6mmm-7hc7","title":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","status":"published","published":"2022-05-17T19:57:39Z","modified":"2023-01-28T05:05:20Z","updated_at":"2026-11-02T14:44:20.029387Z"}],"nvd":[{"id":"CVE-2014-3511","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","status":"published","published":"2014-08-13T23:55:07.623Z","modified":"2026-06-17T00:08:21.273Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:55.19899Z"}],"osv":[{"id":"BELL-CVE-2014-3511","title":"CVE-2014-3511 does not affect BellSoft software","status":"withdrawn","published":"2014-08-13T23:55:00Z","modified":"2026-01-28T07:20:39.568669Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2014-3511","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","status":"published","published":"2014-08-13T23:55:07Z","modified":"2026-04-16T06:19:11.944941576Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3511","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","status":"published","published":"2014-08-13T23:55:07.623Z","modified":"2026-10-23T15:47:23.251124914Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"DSA-2998-1","title":"openssl - security update","status":"published","published":"2014-08-07T00:00:00Z","modified":"2026-03-09T01:23:16.493137Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0325","title":"Updated openssl packages fix security vulnerabilities","description":"A flaw in OBJ_obj2txt may cause pretty printing functions such as\nX509_name_oneline, X509_name_print_ex et al. to leak some information from\nthe stack. Applications may be affected if they echo pretty printing output\nto the attacker. OpenSSL SSL/TLS clients and servers themselves are not\naffected (CVE-2014-3508).\n\nThe issue affects OpenSSL clients and allows a malicious server to crash\nthe client with a null pointer dereference (read) by specifying an SRP\nciphersuite even though it was not properly negotiated with the client. This\ncan be exploited through a Denial of Service attack (CVE-2014-5139).\n\nIf a multithreaded client connects to a malicious server using a resumed\nsession and the server sends an ec point format extension it could write up\nto 255 bytes to freed memory (CVE-2014-3509).\n\nAn attacker can force an error condition which causes openssl to crash\nwhilst processing DTLS packets due to memory being freed twice. This can be\nexploited through a Denial of Service attack (CVE-2014-3505).\n\nAn attacker can force openssl to consume large amounts of memory whilst\nprocessing DTLS handshake messages. This can be exploited through a Denial\nof Service attack (CVE-2014-3506).\n\nBy sending carefully crafted DTLS packets an attacker could cause openssl to\nleak memory. This can be exploited through a Denial of Service attack\n(CVE-2014-3507).\n\nOpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to a\ndenial of service attack. A malicious server can crash the client with a\nnull pointer dereference (read) by specifying an anonymous (EC)DH\nciphersuite and sending carefully crafted handshake messages\n(CVE-2014-3510).\n\nA flaw in the OpenSSL SSL/TLS server code causes the server to negotiate\nTLS 1.0 instead of higher protocol versions when the ClientHello message is\nbadly fragmented. This allows a man-in-the-middle attacker to force a\ndowngrade to TLS 1.0 even if both the server and the client support a higher\nprotocol version, by modifying the client's TLS records (CVE-2014-3511).\n\nA malicious client or server can send invalid SRP parameters and overrun\nan internal buffer. Only applications which are explicitly set up for SRP\nuse are affected (CVE-2014-3512).\n","status":"published","published":"2014-08-12T09:16:46Z","modified":"2026-04-16T06:25:43.484320856Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10271-1","title":"libopenssl-devel-1.0.2j-2.2 on GA media","description":"These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:51.178222Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10309-1","title":"libcrypto38-2.5.0-1.1 on GA media","description":"These are all security issues fixed in the libcrypto38-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:24:08.668011Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10529-1","title":"libopenssl1_0_0-steam-1.0.2h-4.1 on GA media","description":"These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:26.599598Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11127-1","title":"libopenssl-1_1-devel-1.1.1l-1.2 on GA media","description":"These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:19.520287Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"RHSA-2014:1052","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T21:54:57Z","modified":"2026-08-05T10:02:46Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1054","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T21:55:11Z","modified":"2026-08-05T10:02:47Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0126","title":"Red Hat Security Advisory: rhev-hypervisor6 security update","status":"published","published":"2024-09-13T09:21:04Z","modified":"2026-08-05T10:03:05Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0197","title":"Red Hat Security Advisory: rhevm-spice-client security and bug fix update","status":"published","published":"2024-09-13T08:55:08Z","modified":"2026-08-05T10:03:06Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-FU-2022:0445-1","title":"Feature update for venv-salt-minion","description":"This feature update for venv-salt-minion provides the following changes:\n\n- Introduce `venv-salt-minion`.\n- Mention fixed issues provided with the bundle.\n  ","status":"published","published":"2022-02-16T15:23:18Z","modified":"2026-02-04T02:38:14.687149Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2015:0769-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T02:44:28.505462Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0546-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T03:02:18.565758Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1185-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T04:18:15.95367Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-3511","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.","status":"published","published":"2014-08-07T00:00:00Z","modified":"2026-04-22T09:39:59.111841Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2308-1","title":"openssl vulnerabilities","description":"Adam Langley and Wan-Teh Chang discovered that OpenSSL incorrectly handled\ncertain DTLS packets. A remote attacker could use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2014-3505)\n\nAdam Langley discovered that OpenSSL incorrectly handled memory when\nprocessing DTLS handshake messages. A remote attacker could use this issue\nto cause OpenSSL to consume memory, resulting in a denial of service.\n(CVE-2014-3506)\n\nAdam Langley discovered that OpenSSL incorrectly handled memory when\nprocessing DTLS fragments. A remote attacker could use this issue to cause\nOpenSSL to leak memory, resulting in a denial of service. This issue\nonly affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-3507)\n\nIvan Fratric discovered that OpenSSL incorrectly leaked information in\nthe pretty printing functions. When OpenSSL is used with certain\napplications, an attacker may use this issue to possibly gain access to\nsensitive information. (CVE-2014-3508)\n\nGabor Tyukasz discovered that OpenSSL contained a race condition when\nprocessing serverhello messages. A malicious server could use this issue\nto cause clients to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-3509)\n\nFelix Gröbert discovered that OpenSSL incorrectly handled certain DTLS\nhandshake messages. A malicious server could use this issue to cause\nclients to crash, resulting in a denial of service. (CVE-2014-3510)\n\nDavid Benjamin and Adam Langley discovered that OpenSSL incorrectly\nhandled fragmented ClientHello messages. If a remote attacker were able to\nperform a machine-in-the-middle attack, this flaw could be used to force a\nprotocol downgrade to TLS 1.0. This issue only affected Ubuntu 12.04 LTS\nand Ubuntu 14.04 LTS. (CVE-2014-3511)\n\nSean Devlin and Watson Ladd discovered that OpenSSL incorrectly handled\ncertain SRP parameters. A remote attacker could use this with applications\nthat use SRP to cause a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.\n(CVE-2014-3512)\n\nJoonas Kuorilehto and Riku Hietamäki discovered that OpenSSL incorrectly\nhandled certain Server Hello messages that specify an SRP ciphersuite. A\nmalicious server could use this issue to cause clients to crash, resulting\nin a denial of service. This issue only affected Ubuntu 12.04 LTS and\nUbuntu 14.04 LTS. (CVE-2014-5139)\n","status":"published","published":"2014-08-07T18:13:17Z","modified":"2026-04-22T08:58:43.970817Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}