Логотип exploitDog
bind:CVE-2014-8176
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2014-8176

Количество 10

Количество 10

ubuntu логотип

CVE-2014-8176

около 10 лет назад

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

CVSS2: 7.5
EPSS: Средний
redhat логотип

CVE-2014-8176

около 10 лет назад

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

CVSS3: 7.5
EPSS: Средний
nvd логотип

CVE-2014-8176

около 10 лет назад

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

CVSS2: 7.5
EPSS: Средний
debian логотип

CVE-2014-8176

около 10 лет назад

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9. ...

CVSS2: 7.5
EPSS: Средний
github логотип

GHSA-qwvg-rfmc-974p

около 3 лет назад

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

EPSS: Средний
fstec логотип

BDU:2022-02639

около 10 лет назад

Уязвимость функции dtls1_clear_queues библиотеки OpenSSL, позволяющая нарушителю вызвать отказ в обслуживании или, возможно, оказать другое воздействие

CVSS3: 7.3
EPSS: Средний
oracle-oval логотип

ELSA-2015-1115

около 10 лет назад

ELSA-2015-1115: openssl security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1185-1

почти 11 лет назад

Security update for openssl1

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:0546-1

почти 11 лет назад

Security update for openssl1

EPSS: Низкий
suse-cvrf логотип

SUSE-RU-2015:0769-1

почти 11 лет назад

Security update for openssl1

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2014-8176

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

CVSS2: 7.5
19%
Средний
около 10 лет назад
redhat логотип
CVE-2014-8176

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

CVSS3: 7.5
19%
Средний
около 10 лет назад
nvd логотип
CVE-2014-8176

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

CVSS2: 7.5
19%
Средний
около 10 лет назад
debian логотип
CVE-2014-8176

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9. ...

CVSS2: 7.5
19%
Средний
около 10 лет назад
github логотип
GHSA-qwvg-rfmc-974p

The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.

19%
Средний
около 3 лет назад
fstec логотип
BDU:2022-02639

Уязвимость функции dtls1_clear_queues библиотеки OpenSSL, позволяющая нарушителю вызвать отказ в обслуживании или, возможно, оказать другое воздействие

CVSS3: 7.3
19%
Средний
около 10 лет назад
oracle-oval логотип
ELSA-2015-1115

ELSA-2015-1115: openssl security update (MODERATE)

около 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:1185-1

Security update for openssl1

почти 11 лет назад
suse-cvrf логотип
SUSE-SU-2015:0546-1

Security update for openssl1

почти 11 лет назад
suse-cvrf логотип
SUSE-RU-2015:0769-1

Security update for openssl1

почти 11 лет назад

Уязвимостей на страницу