{"id":"CVE-2014-3569","aliases":["BELL-CVE-2014-3569","DEBIAN-CVE-2014-3569","DLA-81-1","DSA-3125-1","EUVD-2014-3550","GHSA-66cr-qxrv-fpg2","MGASA-2015-0022","SUSE-SU-2015:0620-1","SUSE-SU-2015:0946-1","SUSE-SU-2015:1177-1","UBUNTU-CVE-2014-3569","openSUSE-SU-2024:10271-1","openSUSE-SU-2024:10529-1","openSUSE-SU-2024:11127-1"],"status":"published","title":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not...","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.19524,"percentile":0.97393,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-08-19T23:56:10Z","modified":"2026-10-23T15:47:26Z","fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.0.1k-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.0.1k-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.0.1k-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1k-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1k-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1k-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8o-4squeeze18"}]}],"versions":["0.9.8o-4","0.9.8o-4squeeze1","0.9.8o-4squeeze11","0.9.8o-4squeeze12","0.9.8o-4squeeze13","0.9.8o-4squeeze14","0.9.8o-4squeeze15","0.9.8o-4squeeze16","0.9.8o-4squeeze17","0.9.8o-4squeeze2","0.9.8o-4squeeze3","0.9.8o-4squeeze4","0.9.8o-4squeeze4~bpo50+1","0.9.8o-4squeeze5","0.9.8o-4squeeze7","0.9.8o-4squeeze8","0.9.8o-4squeeze9"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-2+deb7u14"}]}],"versions":["1.0.1e-2","1.0.1e-2+deb7u1","1.0.1e-2+deb7u10","1.0.1e-2+deb7u11","1.0.1e-2+deb7u12","1.0.1e-2+deb7u13","1.0.1e-2+deb7u2","1.0.1e-2+deb7u3","1.0.1e-2+deb7u4","1.0.1e-2+deb7u5","1.0.1e-2+deb7u6","1.0.1e-2+deb7u7","1.0.1e-2+deb7u8","1.0.1e-2+deb7u9"],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1k-1.mga4"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.8"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-1.2"}]}],"bundled":136}],"products":[{"vendor":"openssl","product":"openssl"}],"references":[{"url":"http://www.securityfocus.com/bid/71934","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142895206924048\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","web"]},{"url":"http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3569.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"https://support.apple.com/HT204659","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3569","tags":["x_refsource_CONFIRM","x_transferred","web","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1033378","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142721102728110\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://www.openssl.org/news/secadv_20150108.txt","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10679","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=b82924741b4bd590da890619be671f4635e46c2b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142496289803847\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10108","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=6ce9687b5aba5391fc0de50e18779eb676d0e04d","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10102","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050297101809\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050205101530\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=142496179803395\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://support.citrix.com/article/CTX216642","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050254401665\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://rt.openssl.org/Ticket/Display.html?id=3571\u0026user=guest\u0026pass=guest","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bto.bluecoat.com/security-advisory/sa88","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=392fa7a952e97d82eac6958c81ed1e256e6b8ca5","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3125","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3569"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=392fa7a952e97d82eac6958c81ed1e256e6b8ca5"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=6ce9687b5aba5391fc0de50e18779eb676d0e04d"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=b82924741b4bd590da890619be671f4635e46c2b"},{"url":"https://github.com/advisories/GHSA-66cr-qxrv-fpg2"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-3569","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0022.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14987","tags":["report"]},{"url":"http://www.mandriva.com/en/support/security/advisories/mbs1/MDVSA-2015%3A019/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150620-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/734436","tags":["report"]},{"url":"https://bugzilla.suse.com/768832","tags":["report"]},{"url":"https://bugzilla.suse.com/780019","tags":["report"]},{"url":"https://bugzilla.suse.com/789263","tags":["report"]},{"url":"https://bugzilla.suse.com/791863","tags":["report"]},{"url":"https://bugzilla.suse.com/792332","tags":["report"]},{"url":"https://bugzilla.suse.com/803040","tags":["report"]},{"url":"https://bugzilla.suse.com/830086","tags":["report"]},{"url":"https://bugzilla.suse.com/834028","tags":["report"]},{"url":"https://bugzilla.suse.com/834967","tags":["report"]},{"url":"https://bugzilla.suse.com/837801","tags":["report"]},{"url":"https://bugzilla.suse.com/857678","tags":["report"]},{"url":"https://bugzilla.suse.com/858823","tags":["report"]},{"url":"https://bugzilla.suse.com/861493","tags":["report"]},{"url":"https://bugzilla.suse.com/868673","tags":["report"]},{"url":"https://bugzilla.suse.com/873896","tags":["report"]},{"url":"https://bugzilla.suse.com/878779","tags":["report"]},{"url":"https://bugzilla.suse.com/887580","tags":["report"]},{"url":"https://bugzilla.suse.com/901237","tags":["report"]},{"url":"https://bugzilla.suse.com/914058","tags":["report"]},{"url":"https://bugzilla.suse.com/922043","tags":["report"]},{"url":"https://bugzilla.suse.com/927623","tags":["report"]},{"url":"https://bugzilla.suse.com/934789","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151177-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3569","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-3569","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","status":"published","published":"2014-12-24T11:00:00Z","modified":"2024-08-06T10:50:17.405Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3550","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","status":"published","published":"2014-12-24T11:00:00Z","modified":"2024-08-06T10:50:17Z","updated_at":"2026-11-03T01:57:10.446744Z"}],"ghsa":[{"id":"GHSA-66cr-qxrv-fpg2","title":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not...","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","status":"published","published":"2022-05-17T00:24:12Z","modified":"2025-04-12T12:43:21Z","updated_at":"2026-11-02T15:01:19.873405Z"}],"nvd":[{"id":"CVE-2014-3569","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","status":"published","published":"2014-12-24T11:59:00.057Z","modified":"2026-06-17T00:08:31.25Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:57.680258Z"}],"osv":[{"id":"BELL-CVE-2014-3569","title":"CVE-2014-3569 does not affect BellSoft software","status":"withdrawn","published":"2014-12-24T11:59:00Z","modified":"2026-01-28T07:20:41.754928Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2014-3569","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","status":"published","published":"2014-12-24T11:59:00Z","modified":"2026-04-16T06:21:38.269568089Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3569","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","status":"published","published":"2014-12-24T11:59:00.057Z","modified":"2026-10-23T15:47:26.970182008Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"DLA-81-1","title":"openssl - security update","status":"published","published":"2014-11-01T00:00:00Z","modified":"2026-03-09T02:10:57.040975Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3125-1","title":"openssl - security update","status":"published","published":"2015-01-11T00:00:00Z","modified":"2026-03-09T01:20:16.379075Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0022","title":"Updated openssl packages fix security vulnerabilities","description":"A carefully crafted DTLS message can cause a segmentation fault in\nOpenSSL due to a NULL pointer dereference. This could lead to a Denial\nOf Service attack (CVE-2014-3571).\n\nA memory leak can occur in the dtls1_buffer_record function under\ncertain conditions. In particular this could occur if an attacker\nsent repeated DTLS records with the same sequence number but for the\nnext epoch. The memory leak could be exploited by an attacker in a\nDenial of Service attack through memory exhaustion (CVE-2015-0206).\n\nWhen openssl is built with the no-ssl3 option and a SSL v3 ClientHello\nis received the ssl method would be set to NULL which could later\nresult in a NULL pointer dereference (CVE-2014-3569).\n\nAn OpenSSL client will accept a handshake using an ephemeral ECDH\nciphersuite using an ECDSA certificate if the server key exchange\nmessage is omitted. This effectively removes forward secrecy from\nthe ciphersuite (CVE-2014-3572).\n\nAn OpenSSL client will accept the use of an RSA temporary key in\na non-export RSA key exchange ciphersuite. A server could present\na weak temporary key and downgrade the security of the session\n(CVE-2015-0204).\n\nAn OpenSSL server will accept a DH certificate for client\nauthentication without the certificate verify message. This effectively\nallows a client to authenticate without the use of a private key. This\nonly affects servers which trust a client certificate authority which\nissues certificates containing DH keys: these are extremely rare and\nhardly ever encountered (CVE-2015-0205).\n\nOpenSSL accepts several non-DER-variations of certificate signature\nalgorithm and signature encodings. OpenSSL also does not enforce a\nmatch between the signature algorithm between the signed and unsigned\nportions of the certificate. By modifying the contents of the signature\nalgorithm or the encoding of the signature, it is possible to change\nthe certificate's fingerprint. This does not allow an attacker to\nforge certificates, and does not affect certificate verification or\nOpenSSL servers/clients in any other way. It also does not affect\ncommon revocation mechanisms. Only custom applications that rely\non the uniqueness of the fingerprint (e.g. certificate blacklists)\nmay be affected (CVE-2014-8275).\n\nBignum squaring (BN_sqr) may produce incorrect results on some\nplatforms, including x86_64. This bug occurs at random with a very\nlow probability, and is not known to be exploitable in any way,\nthough its exact impact is difficult to determine (CVE-2014-3570).\n\nThe updated packages have been upgraded to the 1.0.1k version where\nthese security flaws have been fixed.\n","status":"published","published":"2015-01-11T19:54:28Z","modified":"2026-04-16T06:22:59.006977121Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10271-1","title":"libopenssl-devel-1.0.2j-2.2 on GA media","description":"These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:51.178222Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10529-1","title":"libopenssl1_0_0-steam-1.0.2h-4.1 on GA media","description":"These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:26.599598Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11127-1","title":"libopenssl-1_1-devel-1.1.1l-1.2 on GA media","description":"These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:19.520287Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2015:0620-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T04:24:15.175685Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0946-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:29:58.141198Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1177-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:16:44.028585Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-3569","description":"The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling.  NOTE: this issue became relevant after the CVE-2014-3568 fix.","status":"published","published":"2014-12-24T11:59:00Z","modified":"2026-04-22T09:41:06.979392Z","updated_at":"2026-11-02T15:54:09.010095Z"}]}}