Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-3512
7.5
HIGHCVSS v2
Published
August 13, 2014
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.
openssl/openssl
GitHubGeneral purpose TLS and crypto library
GitHubGeneral purpose TLS and crypto library= 1.0.1, = 1.0.0c, = 1.0.0i, = 1.0.0, = 1.0.1h, = 1.0.0m, = 1.0.1c, = 1.0.1g, = 1.0.1e, = 1.0.1f, = 1.0.0j, = 1.0.1a, = 1.0.1b, = 1.0.0d, = 1.0.0e, = 1.0.0k, = 1.0.0l, = 1.0.0f, = 1.0.1d, = 1.0.0h, = 1.0.0a, = 1.0.0b, = 1.0.0gNVD
openssl
NPMNodejs openssl wrapper
NPMNodejs openssl wrapper= 1.0.1, = 1.0.0c, = 1.0.0i, = 1.0.0, = 1.0.1h, = 1.0.0m, = 1.0.1c, = 1.0.1g, = 1.0.1e, = 1.0.1f, = 1.0.0j, = 1.0.1a, = 1.0.1b, = 1.0.0d, = 1.0.0e, = 1.0.0k, = 1.0.0l, = 1.0.0f, = 1.0.1d, = 1.0.0h, = 1.0.0a, = 1.0.0b, = 1.0.0gNVD