CVE-2014-3571 : 상세 정보

CVE-2014-3571

31.58%V4
2015-01-09
02h00 +00:00
Network
2024-08-06
10h50 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.

CVE 정보

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

언급된 제품

구성 0

Openssl>>Openssl >> Version 까지 (포함) 0.9.8zc

Openssl>>Openssl >> Version 1.0.0a

Openssl>>Openssl >> Version 1.0.0b

Openssl>>Openssl >> Version 1.0.0c

Openssl>>Openssl >> Version 1.0.0d

Openssl>>Openssl >> Version 1.0.0e

Openssl>>Openssl >> Version 1.0.0f

Openssl>>Openssl >> Version 1.0.0g

Openssl>>Openssl >> Version 1.0.0h

Openssl>>Openssl >> Version 1.0.0i

Openssl>>Openssl >> Version 1.0.0j

Openssl>>Openssl >> Version 1.0.0k

Openssl>>Openssl >> Version 1.0.0l

Openssl>>Openssl >> Version 1.0.0m

Openssl>>Openssl >> Version 1.0.0n

Openssl>>Openssl >> Version 1.0.0o

Openssl>>Openssl >> Version 1.0.1a

Openssl>>Openssl >> Version 1.0.1b

Openssl>>Openssl >> Version 1.0.1c

Openssl>>Openssl >> Version 1.0.1d

Openssl>>Openssl >> Version 1.0.1e

Openssl>>Openssl >> Version 1.0.1f

Openssl>>Openssl >> Version 1.0.1g

Openssl>>Openssl >> Version 1.0.1h

Openssl>>Openssl >> Version 1.0.1i

Openssl>>Openssl >> Version 1.0.1j

참고 자료

http://marc.info/?l=bugtraq&m=142895206924048&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=144050155601375&w=2
Tags : vendor-advisory, x_refsource_HP
https://support.apple.com/HT204659
Tags : x_refsource_CONFIRM
http://www.securityfocus.com/bid/71937
Tags : vdb-entry, x_refsource_BID
http://marc.info/?l=bugtraq&m=143748090628601&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id/1033378
Tags : vdb-entry, x_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=142721102728110&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.mandriva.com/security/advisories?name=MDVSA-2015:019
Tags : vendor-advisory, x_refsource_MANDRIVA
http://rhn.redhat.com/errata/RHSA-2015-0066.html
Tags : vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=142496289803847&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=144050297101809&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=144050205101530&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=142496179803395&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
Tags : vendor-advisory, x_refsource_MANDRIVA
http://marc.info/?l=bugtraq&m=144050254401665&w=2
Tags : vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=142496289803847&w=2
Tags : vendor-advisory, x_refsource_HP
http://www.debian.org/security/2015/dsa-3125
Tags : vendor-advisory, x_refsource_DEBIAN