Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-3505
5
MEDIUMCVSS v2
Published
August 13, 2014
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.
openssl/openssl
GitHubGeneral purpose TLS and crypto library
GitHubGeneral purpose TLS and crypto library= 0.9.8b, = 0.9.8m, = 1.0.1, = 0.9.8c, = 1.0.0c, = 1.0.0i, = 1.0.0, = 1.0.1h, = 0.9.8n, = 1.0.1c, = 1.0.0h, = 0.9.8j, = 0.9.8k, = 0.9.8za, = 1.0.0e, = 1.0.0f, = 1.0.0m, = 0.9.8g, = 0.9.8p, = 1.0.1g, = 0.9.8e, = 0.9.8u, = 0.9.8d, = 1.0.1d, = 1.0.0g, = 0.9.8a, = 0.9.8i, = 0.9.8q, = 0.9.8r, = 0.9.8y, = 1.0.1a, = 1.0.1b, = 0.9.8, = 0.9.8h, = 0.9.8o, = 0.9.8w, = 0.9.8x, = 1.0.0d, = 1.0.0k, = 1.0.0l, = 0.9.8f, = 0.9.8v, = 1.0.1e, = 1.0.1f, = 1.0.0a, = 1.0.0b, = 1.0.0j, = 0.9.8l, = 0.9.8s, = 0.9.8tNVD
openssl
NPMNodejs openssl wrapper
NPMNodejs openssl wrapper= 0.9.8b, = 0.9.8m, = 1.0.1, = 0.9.8c, = 1.0.0c, = 1.0.0i, = 1.0.0, = 1.0.1h, = 0.9.8n, = 1.0.1c, = 1.0.0h, = 0.9.8j, = 0.9.8k, = 0.9.8za, = 1.0.0e, = 1.0.0f, = 1.0.0m, = 0.9.8g, = 0.9.8p, = 1.0.1g, = 0.9.8e, = 0.9.8u, = 0.9.8d, = 1.0.1d, = 1.0.0g, = 0.9.8a, = 0.9.8i, = 0.9.8q, = 0.9.8r, = 0.9.8y, = 1.0.1a, = 1.0.1b, = 0.9.8, = 0.9.8h, = 0.9.8o, = 0.9.8w, = 0.9.8x, = 1.0.0d, = 1.0.0k, = 1.0.0l, = 0.9.8f, = 0.9.8v, = 1.0.1e, = 1.0.1f, = 1.0.0a, = 1.0.0b, = 1.0.0j, = 0.9.8l, = 0.9.8s, = 0.9.8t