01 Record

CVE-2014-0224

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 95.32% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 99.8% of scored records. A rank, not a probability.
NVD base score: 7.4 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2014-06-05 21:00Z12 YR AGO

Last updated

2024-08-06 09:05Z2 YR AGO

Reserved

2013-12-03

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-326Inadequate Encryption StrengthClass
CWE-841Improper Enforcement of Behavioral WorkflowClass

Data version

5.1

Document digest

d2dbce18c4d8551bd2f23b20c07e7d60c60703278ad3a115e243c8a8f2890d70

05 Affected products

VendorProductVersionsPlatforms

fedoraprojectfedoraNot specified—

filezilla-projectfilezilla_serverNot specified—

mariadbmariadbNot specified—

nodejsnode.jsNot specified—

opensslopensslNot specified—

opensuseopensuseNot specified—

pythonpythonNot specified—

redhatenterprise_linuxNot specified—

redhatjboss_enterprise_application_platformNot specified—

redhatjboss_enterprise_web_platformNot specified—

redhatjboss_enterprise_web_serverNot specified—

redhatrhel_elsNot specified—

redhatrhel_eusNot specified—

redhatrhel_mission_criticalNot specified—

redhatstorageNot specified—

siemensapplication_processing_engineNot specified—

siemensapplication_processing_engine_firmwareNot specified—

siemenscp1543-1Not specified—

siemenscp1543-1_firmwareNot specified—

siemensroxNot specified—

siemensrox_firmwareNot specified—

siemenss7-1500Not specified—

siemenss7-1500_firmwareNot specified—

06 References

secunia.com59342http://secunia.com/advisories/59342third-party-advisoryx_refsource_SECUNIA
secunia.com59669http://secunia.com/advisories/59669third-party-advisoryx_refsource_SECUNIA
secunia.com59525http://secunia.com/advisories/59525third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBMU03071http://marc.info/?l=bugtraq&m=140604261522465&w=2vendor-advisoryx_refsource_HP
secunia.com59004http://secunia.com/advisories/59004third-party-advisoryx_refsource_SECUNIA
secunia.com59530http://secunia.com/advisories/59530third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21675626x_refsource_CONFIRM
secunia.com59824http://secunia.com/advisories/59824third-party-advisoryx_refsource_SECUNIA
secunia.com59282http://secunia.com/advisories/59282third-party-advisoryx_refsource_SECUNIA
www.novell.comhttp://www.novell.com/support/kb/doc.php?id=7015300x_refsource_CONFIRM
secunia.com59215http://secunia.com/advisories/59215third-party-advisoryx_refsource_SECUNIA
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1103586x_refsource_CONFIRM
secunia.com59990http://secunia.com/advisories/59990third-party-advisoryx_refsource_SECUNIA
secunia.com59264http://secunia.com/advisories/59264third-party-advisoryx_refsource_SECUNIA
secunia.com59454http://secunia.com/advisories/59454third-party-advisoryx_refsource_SECUNIA
secunia.com58492http://secunia.com/advisories/58492third-party-advisoryx_refsource_SECUNIA
secunia.com59186http://secunia.com/advisories/59186third-party-advisoryx_refsource_SECUNIA
secunia.com59188http://secunia.com/advisories/59188third-party-advisoryx_refsource_SECUNIA
secunia.com59126http://secunia.com/advisories/59126third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBMU03078http://marc.info/?l=bugtraq&m=140672208601650&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBMU03089http://marc.info/?l=bugtraq&m=140784085708882&w=2vendor-advisoryx_refsource_HP
www.novell.comhttp://www.novell.com/support/kb/doc.php?id=7015264x_refsource_CONFIRM
support.f5.comhttp://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.htmlx_refsource_CONFIRM
secunia.com59306http://secunia.com/advisories/59306third-party-advisoryx_refsource_SECUNIA
rhn.redhat.comRHSA-2014:0627http://rhn.redhat.com/errata/RHSA-2014-0627.htmlvendor-advisoryx_refsource_REDHAT
www.websense.comhttp://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0x_refsource_CONFIRM
marc.infoHPSBGN03068http://marc.info/?l=bugtraq&m=140544599631400&w=2vendor-advisoryx_refsource_HP
rhn.redhat.comRHSA-2014:0626http://rhn.redhat.com/errata/RHSA-2014-0626.htmlvendor-advisoryx_refsource_REDHAT
secunia.com59190http://secunia.com/advisories/59190third-party-advisoryx_refsource_SECUNIA
secunia.com58639http://secunia.com/advisories/58639third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21678289x_refsource_CONFIRM
www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676877x_refsource_CONFIRM
secunia.com59446http://secunia.com/advisories/59446third-party-advisoryx_refsource_SECUNIA
secunia.com59529http://secunia.com/advisories/59529third-party-advisoryx_refsource_SECUNIA
secunia.com59445http://secunia.com/advisories/59445third-party-advisoryx_refsource_SECUNIA
www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2014-0012.htmlx_refsource_CONFIRM
secunia.com59589http://secunia.com/advisories/59589third-party-advisoryx_refsource_SECUNIA
secunia.com59894http://secunia.com/advisories/59894third-party-advisoryx_refsource_SECUNIA
secunia.com59325http://secunia.com/advisories/59325third-party-advisoryx_refsource_SECUNIA
secunia.com59354http://secunia.com/advisories/59354third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037729x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677131x_refsource_CONFIRM
marc.infoHPSBUX03046http://marc.info/?l=bugtraq&m=140266410314613&w=2vendor-advisoryx_refsource_HP
secunia.com61254http://secunia.com/advisories/61254third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21678233x_refsource_CONFIRM
secunia.com59447http://secunia.com/advisories/59447third-party-advisoryx_refsource_SECUNIA
www.securitytracker.com1031594http://www.securitytracker.com/id/1031594vdb-entryx_refsource_SECTRACK
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676655x_refsource_CONFIRM
www14.software.ibm.comhttp://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=Ex_refsource_CONFIRM
secunia.com59223http://secunia.com/advisories/59223third-party-advisoryx_refsource_SECUNIA
secunia.com58743http://secunia.com/advisories/58743third-party-advisoryx_refsource_SECUNIA
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlx_refsource_CONFIRM
secunia.com58719http://secunia.com/advisories/58719third-party-advisoryx_refsource_SECUNIA
secunia.com59449http://secunia.com/advisories/59449third-party-advisoryx_refsource_SECUNIA
secunia.com59132http://secunia.com/advisories/59132third-party-advisoryx_refsource_SECUNIA
marc.infoSSRT101818http://marc.info/?l=bugtraq&m=142350350616251&w=2vendor-advisoryx_refsource_HP
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg400001843x_refsource_CONFIRM
marc.infoHPSBST03098http://marc.info/?l=bugtraq&m=140870499402361&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBMU03058http://marc.info/?l=bugtraq&m=140386311427810&w=2vendor-advisoryx_refsource_HP
secunia.com59442http://secunia.com/advisories/59442third-party-advisoryx_refsource_SECUNIA
h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946x_refsource_CONFIRM
marc.infoHPSBOV03047http://marc.info/?l=bugtraq&m=140317760000786&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBST03195http://marc.info/?l=bugtraq&m=142805027510172&w=2vendor-advisoryx_refsource_HP
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676879x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037761x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677828x_refsource_CONFIRM
secunia.com59441http://secunia.com/advisories/59441third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBMU03074http://marc.info/?l=bugtraq&m=140621259019789&w=2vendor-advisoryx_refsource_HP
www.innominate.comhttp://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdfx_refsource_CONFIRM
marc.infoHPSBMU03094http://marc.info/?l=bugtraq&m=140852757108392&w=2vendor-advisoryx_refsource_HP
filezilla-project.orghttps://filezilla-project.org/versions.php?type=serverx_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676786x_refsource_CONFIRM
secunia.com60567http://secunia.com/advisories/60567third-party-advisoryx_refsource_SECUNIA
secunia.com59189http://secunia.com/advisories/59189third-party-advisoryx_refsource_SECUNIA
secunia.com59368http://secunia.com/advisories/59368third-party-advisoryx_refsource_SECUNIA
www.mandriva.comMDVSA-2014:106http://www.mandriva.com/security/advisories?name=MDVSA-2014:106vendor-advisoryx_refsource_MANDRIVA
secunia.com59142http://secunia.com/advisories/59142third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676478x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676845x_refsource_CONFIRM
secunia.com58742http://secunia.com/advisories/58742third-party-advisoryx_refsource_SECUNIA
www.ibm.comhttps://www.ibm.com/support/docview.wss?uid=ssg1S1004670x_refsource_CONFIRM
rhn.redhat.comRHSA-2014:0624http://rhn.redhat.com/errata/RHSA-2014-0624.htmlvendor-advisoryx_refsource_REDHAT
secunia.com59602http://secunia.com/advisories/59602third-party-advisoryx_refsource_SECUNIA
www.kerio.comhttp://www.kerio.com/support/kerio-control/release-historyx_refsource_CONFIRM
secunia.com59300http://secunia.com/advisories/59300third-party-advisoryx_refsource_SECUNIA
secunia.com58930http://secunia.com/advisories/58930third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677080x_refsource_CONFIRM
secunia.com61815http://secunia.com/advisories/61815third-party-advisoryx_refsource_SECUNIA
secunia.com58667http://secunia.com/advisories/58667third-party-advisoryx_refsource_SECUNIA
security.gentoo.orgGLSA-201407-05http://security.gentoo.org/glsa/glsa-201407-05.xmlvendor-advisoryx_refsource_GENTOO
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677390x_refsource_CONFIRM
secunia.com59191http://secunia.com/advisories/59191third-party-advisoryx_refsource_SECUNIA
secunia.com59284http://secunia.com/advisories/59284third-party-advisoryx_refsource_SECUNIA
secunia.com59444http://secunia.com/advisories/59444third-party-advisoryx_refsource_SECUNIA
www.imperialviolet.orghttps://www.imperialviolet.org/2014/06/05/earlyccs.htmlx_refsource_MISC
www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg24037783x_refsource_CONFIRM
secunia.com59365http://secunia.com/advisories/59365third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677695x_refsource_CONFIRM
secunia.com59305http://secunia.com/advisories/59305third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676529x_refsource_CONFIRM
secunia.com59483http://secunia.com/advisories/59483third-party-advisoryx_refsource_SECUNIA
secunia.com58385http://secunia.com/advisories/58385third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilitieshttp://www.securityfocus.com/archive/1/534161/100/0/threadedmailing-listx_refsource_BUGTRAQ
secunia.com59495http://secunia.com/advisories/59495third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=nas8N1020163x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676889x_refsource_CONFIRM
lists.fedoraproject.orgFEDORA-2014-9308http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlvendor-advisoryx_refsource_FEDORA
secunia.com58945http://secunia.com/advisories/58945third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg400001841x_refsource_CONFIRM
marc.infoHPSBST03106http://marc.info/?l=bugtraq&m=141025641601169&w=2vendor-advisoryx_refsource_HP
secunia.com59659http://secunia.com/advisories/59659third-party-advisoryx_refsource_SECUNIA
secunia.com59440http://secunia.com/advisories/59440third-party-advisoryx_refsource_SECUNIA
lists.opensuse.orgopenSUSE-SU-2016:0640http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlvendor-advisoryx_refsource_SUSE
secunia.com59429http://secunia.com/advisories/59429third-party-advisoryx_refsource_SECUNIA
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlx_refsource_CONFIRM
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlx_refsource_CONFIRM
secunia.com59655http://secunia.com/advisories/59655third-party-advisoryx_refsource_SECUNIA
secunia.com59370http://secunia.com/advisories/59370third-party-advisoryx_refsource_SECUNIA
secunia.com59827http://secunia.com/advisories/59827third-party-advisoryx_refsource_SECUNIA
secunia.com58660http://secunia.com/advisories/58660third-party-advisoryx_refsource_SECUNIA
secunia.com59163http://secunia.com/advisories/59163third-party-advisoryx_refsource_SECUNIA
secunia.com58716http://secunia.com/advisories/58716third-party-advisoryx_refsource_SECUNIA
secunia.com59055http://secunia.com/advisories/59055third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676071x_refsource_CONFIRM
www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677836x_refsource_CONFIRM
secunia.com59437http://secunia.com/advisories/59437third-party-advisoryx_refsource_SECUNIA
www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754x_refsource_CONFIRM
secunia.com60176http://secunia.com/advisories/60176third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBPI03107http://marc.info/?l=bugtraq&m=141147110427269&w=2vendor-advisoryx_refsource_HP
secunia.com59101http://secunia.com/advisories/59101third-party-advisoryx_refsource_SECUNIA
esupport.trendmicro.comhttp://esupport.trendmicro.com/solution/en-US/1103813.aspxx_refsource_CONFIRM
secunia.com59374http://secunia.com/advisories/59374third-party-advisoryx_refsource_SECUNIA
secunia.com59063http://secunia.com/advisories/59063third-party-advisoryx_refsource_SECUNIA
www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2014-0006.htmlx_refsource_CONFIRM
discussions.nessus.orghttps://discussions.nessus.org/thread/7517x_refsource_CONFIRM
secunia.com59310http://secunia.com/advisories/59310third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676501x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676536x_refsource_CONFIRM
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlx_refsource_CONFIRM
aix.software.ibm.comhttp://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascx_refsource_CONFIRM
www-01.ibm.comIV61506http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506vendor-advisoryx_refsource_AIXAPAR
secunia.com59502http://secunia.com/advisories/59502third-party-advisoryx_refsource_SECUNIA
www.splunk.comhttp://www.splunk.com/view/SP-CAAAM2Dx_refsource_CONFIRM
secunia.com59878http://secunia.com/advisories/59878third-party-advisoryx_refsource_SECUNIA
www.fortiguard.comhttp://www.fortiguard.com/advisory/FG-IR-14-018/x_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2015:0743http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlvendor-advisoryx_refsource_SUSE
marc.infoHPSBMU03101http://marc.info/?l=bugtraq&m=140852826008699&w=2vendor-advisoryx_refsource_HP
www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676793x_refsource_CONFIRM
secunia.com59214http://secunia.com/advisories/59214third-party-advisoryx_refsource_SECUNIA
www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676356x_refsource_CONFIRM
marc.infoHPSBHF03088http://marc.info/?l=bugtraq&m=140794476212181&w=2vendor-advisoryx_refsource_HP
marc.infoHPSBMU03057http://marc.info/?l=bugtraq&m=140389274407904&w=2vendor-advisoryx_refsource_HP
support.citrix.comhttp://support.citrix.com/article/CTX140876x_refsource_CONFIRM
secunia.com59167http://secunia.com/advisories/59167third-party-advisoryx_refsource_SECUNIA
secunia.com59120http://secunia.com/advisories/59120third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037732x_refsource_CONFIRM
www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=nas8N1020172x_refsource_CONFIRM
marc.infoHPSBMU03053http://marc.info/?l=bugtraq&m=140369637402535&w=2vendor-advisoryx_refsource_HP
secunia.com59380http://secunia.com/advisories/59380third-party-advisoryx_refsource_SECUNIA
www.mandriva.comMDVSA-2014:105http://www.mandriva.com/security/advisories?name=MDVSA-2014:105vendor-advisoryx_refsource_MANDRIVA
secunia.com59460http://secunia.com/advisories/59460third-party-advisoryx_refsource_SECUNIA
secunia.com59506http://secunia.com/advisories/59506third-party-advisoryx_refsource_SECUNIA
secunia.com58939http://secunia.com/advisories/58939third-party-advisoryx_refsource_SECUNIA
secunia.com59661http://secunia.com/advisories/59661third-party-advisoryx_refsource_SECUNIA
secunia.com59514http://secunia.com/advisories/59514third-party-advisoryx_refsource_SECUNIA
secunia.com59677http://secunia.com/advisories/59677third-party-advisoryx_refsource_SECUNIA
rhn.redhat.comRHSA-2014:0630http://rhn.redhat.com/errata/RHSA-2014-0630.htmlvendor-advisoryx_refsource_REDHAT
tools.cisco.com20140605 Multiple Vulnerabilities in OpenSSL Affecting Cisco Productshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-opensslvendor-advisoryx_refsource_CISCO
kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=KB29195x_refsource_CONFIRM
rhn.redhat.comRHSA-2014:0632http://rhn.redhat.com/errata/RHSA-2014-0632.htmlvendor-advisoryx_refsource_REDHAT
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037730x_refsource_CONFIRM
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10075x_refsource_CONFIRM
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlx_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037731x_refsource_CONFIRM
secunia.com58745http://secunia.com/advisories/58745third-party-advisoryx_refsource_SECUNIA
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676419x_refsource_CONFIRM
secunia.com59438http://secunia.com/advisories/59438third-party-advisoryx_refsource_SECUNIA
www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=isg3T1020948x_refsource_CONFIRM
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676496x_refsource_CONFIRM
secunia.com58714http://secunia.com/advisories/58714third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBGN03050http://marc.info/?l=bugtraq&m=140482916501310&w=2vendor-advisoryx_refsource_HP
lists.opensuse.orgopenSUSE-SU-2015:0229http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.htmlvendor-advisoryx_refsource_SUSE
ccsinjection.lepidum.co.jphttp://ccsinjection.lepidum.co.jpx_refsource_MISC
secunia.com59435http://secunia.com/advisories/59435third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBHF03052http://marc.info/?l=bugtraq&m=141658880509699&w=2vendor-advisoryx_refsource_HP
www.openssl.orghttp://www.openssl.org/news/secadv_20140605.txtx_refsource_CONFIRM
secunia.com58615http://secunia.com/advisories/58615third-party-advisoryx_refsource_SECUNIA
marc.infoHPSBST03265http://marc.info/?l=bugtraq&m=142546741516006&w=2vendor-advisoryx_refsource_HP
seclists.org20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilitieshttp://seclists.org/fulldisclosure/2014/Dec/23mailing-listx_refsource_FULLDISC
www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676644x_refsource_CONFIRM
secunia.com59231http://secunia.com/advisories/59231third-party-advisoryx_refsource_SECUNIA
www.ibm.comhttps://www.ibm.com/support/docview.wss?uid=ssg1S1004671x_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2015:0578http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlvendor-advisoryx_refsource_SUSE
support.apple.comhttp://support.apple.com/kb/HT6443x_refsource_CONFIRM
secunia.com59211http://secunia.com/advisories/59211third-party-advisoryx_refsource_SECUNIA
secunia.com58433http://secunia.com/advisories/58433third-party-advisoryx_refsource_SECUNIA
secunia.com60066http://secunia.com/advisories/60066third-party-advisoryx_refsource_SECUNIA
dev.mysql.comhttp://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.htmlx_refsource_CONFIRM

07 Fixed in

Debian 12

openssl
Fixed in 1.0.1h-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

openssl
Fixed in 1.0.1h-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

openssl
Fixed in 1.0.1h-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 14.04 LTS

openssl
Fixed in 1.0.1f-1ubuntu2.2
openssl098
Fixed in 0.9.8o-7ubuntu3.2.14.04.1

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.