CVE-2014-0198
Fixed in a distro release EPSS 40%
The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
Products: openssl, mariadb, fedoraproject fedora, debian_linux, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse linux_enterprise_workstation_extension
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 1.0.1g-4 |
| Debian 13 | openssl | 1.0.1g-4 |
| Debian 14 | openssl | 1.0.1g-4 |
| Debian 7 | openssl | 1.0.1e-2+deb7u9 |
| Red Hat Enterprise Linux 6 | openssl | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-debuginfo | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-devel | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-perl | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-static | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 7 | openssl | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-debuginfo | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-devel | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-libs | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-perl | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-static | 1:1.0.1e-34.el7_0.3 |
| Red Hat storage 2.1 server el6 | openssl | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-debuginfo | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-devel | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-perl | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-static | 0:1.0.1e-16.el6_5.14 |
| SUSE Linux Enterprise Desktop 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Workstation Extension 12 | mariadb | 10.0.16-15.1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 |