CVE-2014-3470
Fixed in a distro release EPSS 86%
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
Products: openssl, redhat storage, fedoraproject fedora, redhat enterprise_linux, mariadb, opensuse leap, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse linux_enterprise_workstation_extension
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 1.0.1h-1 |
| Debian 13 | openssl | 1.0.1h-1 |
| Debian 14 | openssl | 1.0.1h-1 |
| Debian 6.0 | openssl | 0.9.8o-4squeeze15 |
| Debian 7 | openssl | 1.0.1e-2+deb7u10 |
| Red Hat Enterprise Linux 6 | openssl | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-debuginfo | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-devel | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-perl | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-static | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 7 | openssl | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-debuginfo | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-devel | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-libs | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-perl | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-static | 1:1.0.1e-34.el7_0.3 |
| Red Hat storage 2.1 server el6 | openssl | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-debuginfo | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-devel | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-perl | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-static | 0:1.0.1e-16.el6_5.14 |
| SUSE Linux Enterprise Desktop 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Software Development Kit 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | libqt4-sql-plugins | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | libqt4 | 4.8.6-7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP1 | libqt4-sql-plugins | 4.8.6-7.1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.2 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 |