Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-3570

Опубликовано: 09 янв. 2015
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5

Описание

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

РелизСтатусПримечание
artful

released

1.0.1f-1ubuntu10
bionic

released

1.0.1f-1ubuntu10
cosmic

released

1.0.1f-1ubuntu10
devel

released

1.0.1f-1ubuntu10
disco

released

1.0.1f-1ubuntu10
esm-infra-legacy/trusty

not-affected

1.0.1f-1ubuntu2.8
esm-infra/bionic

not-affected

1.0.1f-1ubuntu10
esm-infra/xenial

not-affected

1.0.1f-1ubuntu10
lucid

released

0.9.8k-7ubuntu8.23
precise

released

1.0.1-4ubuntu5.21

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
lucid

DNE

precise

ignored

end of life
precise/esm

DNE

precise was needed
trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 91%
0.07437
Низкий

5 Medium

CVSS2

Связанные уязвимости

CVSS3: 3.7
redhat
больше 10 лет назад

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

nvd
больше 10 лет назад

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

debian
больше 10 лет назад

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0. ...

github
около 3 лет назад

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.

oracle-oval
больше 10 лет назад

ELSA-2015-3010: openssl security update (IMPORTANT)

EPSS

Процентиль: 91%
0.07437
Низкий

5 Medium

CVSS2