Description
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:N/A:PWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascThird Party Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629Third Party Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195Permissions Required, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlMailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlMailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140266410314613&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140317760000786&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140389274407904&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140389355508263&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140431828824371&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140448122410568&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140482916501310&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140491231331543&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140499827729550&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140621259019789&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140752315422991&w=2Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=140904544427729&w=2Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Dec/23Mailing List, Third Party Advisory
- http://secunia.com/advisories/58337Not Applicable
- http://secunia.com/advisories/58579Not Applicable
- http://secunia.com/advisories/58615Not Applicable
- http://secunia.com/advisories/58667Not Applicable
- http://secunia.com/advisories/58713Not Applicable
- http://secunia.com/advisories/58714Not Applicable
- http://secunia.com/advisories/58716Not Applicable
- http://secunia.com/advisories/58742Not Applicable
- http://secunia.com/advisories/58797Not Applicable
- http://secunia.com/advisories/58939Not Applicable
- http://secunia.com/advisories/58945Not Applicable
- http://secunia.com/advisories/58977Not Applicable
- http://secunia.com/advisories/59120Not Applicable
- http://secunia.com/advisories/59126Not Applicable
- http://secunia.com/advisories/59162Not Applicable
- http://secunia.com/advisories/59167Not Applicable
- http://secunia.com/advisories/59175Not Applicable
- http://secunia.com/advisories/59189Not Applicable
- http://secunia.com/advisories/59191Not Applicable
- http://secunia.com/advisories/59192Not Applicable
- http://secunia.com/advisories/59223Not Applicable
- http://secunia.com/advisories/59264Not Applicable
- http://secunia.com/advisories/59282Not Applicable
- http://secunia.com/advisories/59284Not Applicable
- http://secunia.com/advisories/59287Not Applicable
- http://secunia.com/advisories/59300Not Applicable
- http://secunia.com/advisories/59301Not Applicable
- http://secunia.com/advisories/59306Not Applicable
- http://secunia.com/advisories/59310Not Applicable
- http://secunia.com/advisories/59340Not Applicable
- http://secunia.com/advisories/59342Not Applicable
- http://secunia.com/advisories/59362Not Applicable
- http://secunia.com/advisories/59364Not Applicable
- http://secunia.com/advisories/59365Not Applicable
- http://secunia.com/advisories/59413Not Applicable
- http://secunia.com/advisories/59431Not Applicable
- http://secunia.com/advisories/59437Not Applicable
- http://secunia.com/advisories/59438Not Applicable
- http://secunia.com/advisories/59440Not Applicable
Timeline
- Published
- Jun 5, 2014
- Last modified
- Jun 17, 2026
- NVD status
- Modified