CVE-2014-0221 · threatengine.sh

Home/CVE/The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.

CVE

CVE-2014-0221

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

MEDIUM · CVSS 4.3 EPSS 0.82097

Act now

EPSS ≥ 0.50 - high probability of exploitation in the next 30 days
EPSS percentile: top 1% of all CVEs by exploitation likelihood

Sigma rules8 YARA rules0

▤

Affected Products & Versions

13

openssl>= 0.9.8 and < 0.9.8za
openssl>= 1.0.0 and < 1.0.0m
openssl>= 1.0.1 and < 1.0.1h
redhat storageall versions
fedoraproject fedoraall versions
redhat enterprise linuxall versions
mariadb>= 10.0.0 and < 10.0.13
opensuse leapall versions
Show all 13 affected productsopensuseall versions
suse linux enterprise desktopall versions
suse linux enterprise serverall versions
suse linux enterprise software development kitall versions
suse linux enterprise workstation extensionall versions

◈

Sigma Hunt Rules

8

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

producthighEnable LM Hash Storage - ProcCreation

producthighProtected Storage Service Access

producthighEnable LM Hash Storage

productmediumGoogle Cloud Storage Buckets Modified or Deleted

productmediumESXi Storage Information Discovery Via ESXCLI

productmediumWrite Protect For Storage Disabled

Show all 8 top matches

productlowGoogle Cloud Storage Buckets Enumeration

productlowSuspicious File Access to Browser Credential Storage

See all related Sigma rules for this CVE

▣

Scoring & Timeline

4.3

MEDIUM · CVSS v2 (legacy) · secalert@redhat.com

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Published to NVD05 Jun 2014 · 09:55 PM

⚑

Vendor Advisories

22

suse-csafopenSUSE-SU-2024:10271-1
suse-csafopenSUSE-SU-2024:10529-1
suse-csafopenSUSE-SU-2024:11127-1
suse-csafSUSE-SU-2015:0743-1
rhsaRHSA-2014:1021Moderate
Show all 22 vendor advisoriesrhsaRHSA-2014:1086Moderate
suse-csafSUSE-SU-2015:0545-2
suse-csafSUSE-SU-2015:1182-1
suse-csafSUSE-SU-2015:1182-2
suse-csafSUSE-SU-2015:1184-1
suse-csafsuse-su-403
suse-csafsuse-ru-2015_0769-1
suse-csafSUSE-SU-2015:0546-1
suse-csafSUSE-SU-2015:1185-1
rhsaRHSA-2014:1053Moderate
usnUSN-2232-1
rhsaRHSA-2014:0679Important
rhsaRHSA-2014:0628Important
rhsaRHSA-2014:0625Important
rhsaRHSA-2014:0629Important
suse-csafSUSE-SU-2015:0545-1
suse-csafSUSE-SU-2015:1184-2

🔗

References & Sources

80

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascThird Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629Third Party Advisory

http://linux.oracle.com/errata/ELSA-2014-1053.htmlThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlMailing ListThird Party Advisory

Show all 80 references

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140266410314613&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140317760000786&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389274407904&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389355508263&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140431828824371&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140448122410568&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140482916501310&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140491231331543&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140499827729550&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140621259019789&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140752315422991&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140904544427729&w=2Mailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1021.htmlBroken Link

http://seclists.org/fulldisclosure/2014/Dec/23Mailing ListThird Party Advisory

http://secunia.com/advisories/58337Not Applicable

http://secunia.com/advisories/58615Not Applicable

http://secunia.com/advisories/58713Not Applicable

http://secunia.com/advisories/58714Not Applicable

http://secunia.com/advisories/58939Not Applicable

http://secunia.com/advisories/58945Not Applicable

http://secunia.com/advisories/58977Not Applicable

http://secunia.com/advisories/59027Not Applicable

http://secunia.com/advisories/59120Not Applicable

http://secunia.com/advisories/59126Not Applicable

http://secunia.com/advisories/59162Not Applicable

http://secunia.com/advisories/59167Not Applicable

http://secunia.com/advisories/59175Not Applicable

http://secunia.com/advisories/59189Not Applicable

http://secunia.com/advisories/59192Not Applicable

http://secunia.com/advisories/59221Not Applicable

http://secunia.com/advisories/59284Not Applicable

http://secunia.com/advisories/59287Not Applicable

http://secunia.com/advisories/59300Not Applicable

http://secunia.com/advisories/59301Not Applicable

http://secunia.com/advisories/59306Not Applicable

http://secunia.com/advisories/59310Not Applicable

http://secunia.com/advisories/59342Not Applicable

http://secunia.com/advisories/59364Not Applicable

http://secunia.com/advisories/59365Not Applicable

http://secunia.com/advisories/59413Not Applicable

http://secunia.com/advisories/59429Not Applicable

http://secunia.com/advisories/59437Not Applicable

http://secunia.com/advisories/59441Not Applicable

http://secunia.com/advisories/59449Not Applicable

http://secunia.com/advisories/59450Not Applicable

http://secunia.com/advisories/59451Not Applicable

http://secunia.com/advisories/59454Not Applicable

http://secunia.com/advisories/59460Not Applicable

http://secunia.com/advisories/59490Not Applicable

http://secunia.com/advisories/59491Not Applicable

http://secunia.com/advisories/59495Not Applicable

http://secunia.com/advisories/59514Not Applicable

http://secunia.com/advisories/59518Not Applicable

http://secunia.com/advisories/59528Not Applicable

http://secunia.com/advisories/59655Not Applicable

http://secunia.com/advisories/59659Not Applicable

http://secunia.com/advisories/59666Not Applicable

http://secunia.com/advisories/59669Not Applicable

http://secunia.com/advisories/59721Not Applicable

http://secunia.com/advisories/59784Not Applicable

http://secunia.com/advisories/59895Not Applicable

http://secunia.com/advisories/59990Not Applicable

http://secunia.com/advisories/60571Not Applicable

http://secunia.com/advisories/60687Not Applicable

http://secunia.com/advisories/61254Not Applicable

http://security.gentoo.org/glsa/glsa-201407-05.xmlThird Party Advisory

http://support.apple.com/kb/HT6443Third Party Advisory

http://support.citrix.com/article/CTX140876Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-opensslThird Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001841Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=isg400001843Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21673137Broken Link

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin