CVE-2014-3568
Publication date 19 October 2014
Last updated 24 July 2024
Ubuntu priority
OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.
Status
Package | Ubuntu Release | Status |
---|---|---|
openssl | ||
18.04 LTS bionic |
Fixed 1.0.1f-1ubuntu9
|
|
16.04 LTS xenial |
Fixed 1.0.1f-1ubuntu9
|
|
14.04 LTS trusty |
Fixed 1.0.1f-1ubuntu2.7
|
|
openssl098 | ||
18.04 LTS bionic | Not in release | |
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |
Patch details
Package | Patch details |
---|---|
openssl |