CVE-2014-3470 · threatengine.sh

Home/CVE/The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before

CVE

CVE-2014-3470

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

MEDIUM · CVSS 4.3 EPSS 0.91395

Act now

EPSS ≥ 0.50 - high probability of exploitation in the next 30 days
EPSS percentile: top 0% of all CVEs by exploitation likelihood

Sigma rules8 YARA rules0

⬡

Weakness Classification

CWE-476NULL Pointer Dereference

▤

Affected Products & Versions

13

openssl< 0.9.8za
openssl>= 1.0.0 and < 1.0.0m
openssl>= 1.0.1 and < 1.0.1h
redhat storageall versions
fedoraproject fedoraall versions
redhat enterprise linuxall versions
mariadb>= 10.0.0 and < 10.0.13
opensuse leapall versions
Show all 13 affected productsopensuseall versions
suse linux enterprise desktopall versions
suse linux enterprise serverall versions
suse linux enterprise software development kitall versions
suse linux enterprise workstation extensionall versions

◈

Sigma Hunt Rules

8

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

producthighEnable LM Hash Storage - ProcCreation

producthighProtected Storage Service Access

producthighEnable LM Hash Storage

productmediumGoogle Cloud Storage Buckets Modified or Deleted

productmediumESXi Storage Information Discovery Via ESXCLI

productmediumWrite Protect For Storage Disabled

Show all 8 top matches

productlowGoogle Cloud Storage Buckets Enumeration

productlowSuspicious File Access to Browser Credential Storage

See all related Sigma rules for this CVE

▣

Scoring & Timeline

4.3

MEDIUM · CVSS v2 (legacy) · secalert@redhat.com

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Published to NVD05 Jun 2014 · 09:55 PM

⚑

Vendor Advisories

23

suse-csafopenSUSE-SU-2024:10271-1
suse-csafopenSUSE-SU-2024:10529-1
suse-csafopenSUSE-SU-2024:11127-1
suse-csafSUSE-SU-2015:0743-1
suse-csafSUSE-SU-2015:0545-2
Show all 23 vendor advisoriessuse-csafSUSE-SU-2015:1182-1
suse-csafSUSE-SU-2015:1182-2
suse-csafSUSE-SU-2015:1184-1
suse-csafsuse-su-403
suse-csafsuse-ru-2015_0769-1
suse-csafSUSE-SU-2015:0546-1
suse-csafSUSE-SU-2015:1185-1
usnUSN-2232-1
rhsaRHSA-2014:0679Important
rhsaRHSA-2014:0628Important
rhsaRHSA-2014:0625Important
rhsaRHSA-2014:0629Important
suse-csafSUSE-SU-2015:0545-1
suse-csafSUSE-SU-2015:1184-2
suse-csafSUSE-SU-2015:0182-2
suse-csafSUSE-SU-2015:0543-1
suse-csafSUSE-SU-2015:0578-1
suse-csafSUSE-SU-2015:1183-1

🔗

References & Sources

80

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascThird Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195Permissions RequiredThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlMailing ListThird Party Advisory

Show all 80 references

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140266410314613&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140317760000786&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389274407904&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140389355508263&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140431828824371&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140448122410568&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140482916501310&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140491231331543&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140499827729550&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140621259019789&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140752315422991&w=2Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=140904544427729&w=2Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2014/Dec/23Mailing ListThird Party Advisory

http://secunia.com/advisories/58337Not Applicable

http://secunia.com/advisories/58579Not Applicable

http://secunia.com/advisories/58615Not Applicable

http://secunia.com/advisories/58667Not Applicable

http://secunia.com/advisories/58713Not Applicable

http://secunia.com/advisories/58714Not Applicable

http://secunia.com/advisories/58716Not Applicable

http://secunia.com/advisories/58742Not Applicable

http://secunia.com/advisories/58797Not Applicable

http://secunia.com/advisories/58939Not Applicable

http://secunia.com/advisories/58945Not Applicable

http://secunia.com/advisories/58977Not Applicable

http://secunia.com/advisories/59120Not Applicable

http://secunia.com/advisories/59126Not Applicable

http://secunia.com/advisories/59162Not Applicable

http://secunia.com/advisories/59167Not Applicable

http://secunia.com/advisories/59175Not Applicable

http://secunia.com/advisories/59189Not Applicable

http://secunia.com/advisories/59191Not Applicable

http://secunia.com/advisories/59192Not Applicable

http://secunia.com/advisories/59223Not Applicable

http://secunia.com/advisories/59264Not Applicable

http://secunia.com/advisories/59282Not Applicable

http://secunia.com/advisories/59284Not Applicable

http://secunia.com/advisories/59287Not Applicable

http://secunia.com/advisories/59300Not Applicable

http://secunia.com/advisories/59301Not Applicable

http://secunia.com/advisories/59306Not Applicable

http://secunia.com/advisories/59310Not Applicable

http://secunia.com/advisories/59340Not Applicable

http://secunia.com/advisories/59342Not Applicable

http://secunia.com/advisories/59362Not Applicable

http://secunia.com/advisories/59364Not Applicable

http://secunia.com/advisories/59365Not Applicable

http://secunia.com/advisories/59413Not Applicable

http://secunia.com/advisories/59431Not Applicable

http://secunia.com/advisories/59437Not Applicable

http://secunia.com/advisories/59438Not Applicable

http://secunia.com/advisories/59440Not Applicable

http://secunia.com/advisories/59441Not Applicable

http://secunia.com/advisories/59442Not Applicable

http://secunia.com/advisories/59445Not Applicable

http://secunia.com/advisories/59449Not Applicable

http://secunia.com/advisories/59450Not Applicable

http://secunia.com/advisories/59451Not Applicable

http://secunia.com/advisories/59459Not Applicable

http://secunia.com/advisories/59460Not Applicable

http://secunia.com/advisories/59483Not Applicable

http://secunia.com/advisories/59490Not Applicable

http://secunia.com/advisories/59491Not Applicable

http://secunia.com/advisories/59495Not Applicable

http://secunia.com/advisories/59514Not Applicable

http://secunia.com/advisories/59518Not Applicable

http://secunia.com/advisories/59525Not Applicable

http://secunia.com/advisories/59655Not Applicable

http://secunia.com/advisories/59659Not Applicable

http://secunia.com/advisories/59666Not Applicable

http://secunia.com/advisories/59669Not Applicable

http://secunia.com/advisories/59721Not Applicable

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin