CVE-2014-0195

CVE-2014-0195

Published · Updated

Follow this CVE+ Monitor openssl

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

40Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 100%
from disclosure to weaponsame day
Published on NVDJun 5
metasploitJun 5
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
17 products (154 components)
Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Enterprise Linux Server Optional (v. 6) · Red Hat Enterprise Linux Desktop Optional (v. 6) · and others 12
fix ↗
Not affected
8 products (15 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Virtualization 3 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 5 · Red Hat Enterprise Linux 7 · Red Hat JBoss Enterprise Application Platform 5 · and others 3
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.
Affected products
n/a · n/a