CVE-2014-3510
Publication date 7 August 2014
Last updated 24 July 2024
Ubuntu priority
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.
Status
Package | Ubuntu Release | Status |
---|---|---|
openssl | ||
18.04 LTS bionic |
Fixed 1.0.1f-1ubuntu7
|
|
16.04 LTS xenial |
Fixed 1.0.1f-1ubuntu7
|
|
14.04 LTS trusty |
Fixed 1.0.1f-1ubuntu2.5
|
|
openssl098 | ||
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
Patch details
Package | Patch details |
---|---|
openssl |
References
Related Ubuntu Security Notices (USN)
- USN-2308-1
- OpenSSL vulnerabilities
- 7 August 2014