Published: 09/01/2015 Updated: 15/11/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The BN_sqr implementation in OpenSSL prior to 0.9.8zd, 1.0.0 prior to 1.0.0p, and 1.0.1 prior to 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote malicious users to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openssl openssl 1.0.0e
openssl openssl 1.0.0f
openssl openssl 1.0.0m
openssl openssl 1.0.0n
openssl openssl 1.0.1e
openssl openssl 1.0.1d
openssl openssl
openssl openssl 1.0.0a
openssl openssl 1.0.0b
openssl openssl 1.0.0i
openssl openssl 1.0.0j
openssl openssl 1.0.1i
openssl openssl 1.0.1h
openssl openssl 1.0.1a
openssl openssl 1.0.0c
openssl openssl 1.0.0d
openssl openssl 1.0.0k
openssl openssl 1.0.0l
openssl openssl 1.0.1g
openssl openssl 1.0.1f
openssl openssl 1.0.0g
openssl openssl 1.0.0h
openssl openssl 1.0.0o
openssl openssl 1.0.1j
openssl openssl 1.0.1c
openssl openssl 1.0.1b

Synopsis Moderate: openssl security update Type/Severity Security Advisory: Moderate Topic Updated openssl packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 6 and 7Red Hat Product Security has rated this update as having Moderate securityimpact Common Vulnerability S ...

Several security issues were fixed in OpenSSL ...

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2014-3569 Frank Schmirler reported that the ssl23_get_client_hello function in OpenSSL does not properly handle attempts to use unsupported protocols When OpenS ...

OpenSSL before 098zd, 100 before 100p, and 101 before 101k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_p ...

It was found that OpenSSL's BigNumber Squaring implementation could produce incorrect results under certain special conditions This flaw could possibly affect certain OpenSSL library functionality, such as RSA blinding Note that this issue occurred rarely and with a low probability, and there is currently no known way of exploiting it ...

Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service condition or perform a man-in-the-middle attack On January 8, 2015, the OpenSSL Project released a security advisory detailing eight distinct vulnerabilities ...

Nessus, SecurityCenter, and the Tenable Appliance use OpenSSL, which recently disclosed several vulnerabilities OpenSSL contains a flaw in the dtls1_buffer_record() function that is triggered when handling a saturation of DTLS records that contain the same sequence number, but for the next epoch This may allow a remote attacker to cause a memory ...

Description of Problem A number of security vulnerabilities have been identified in firmware used in the Lights Out Management (LOM) component across all NetScaler-based hardware appliances: Citrix NetScaler Application Delivery Controller (ADC) Citrix NetScaler Gateway Citrix NetScaler Service Delivery Appliance Citrix CloudBridge (now NetScaler S ...

CVE-2014-3570

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect