CVE-2014-3510: Null Pointer Dereference

Q: What is the severity of CVE-2014-3510?

CVE-2014-3510 is rated as a high severity vulnerability due to its potential to crash applications using vulnerable OpenSSL versions.

Q: How do I fix CVE-2014-3510?

To fix CVE-2014-3510, upgrade to OpenSSL version 0.9.8zb, 1.0.0n, or 1.0.1i or later.

Q: Which versions of OpenSSL are affected by CVE-2014-3510?

CVE-2014-3510 affects OpenSSL versions 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i.

Q: What happens if I do not patch CVE-2014-3510?

If you do not patch CVE-2014-3510, your system remains vulnerable to crashes from malicious DTLS handshake messages.

Q: Is CVE-2014-3510 specific to DTLS servers?

Yes, CVE-2014-3510 specifically affects OpenSSL DTLS clients connecting to malicious servers using vulnerable ciphersuites.

Published Aug 7, 2014

Updated

It was found that OpenSSL DTLS clients using anonymous (EC)DH ciphersuites could be crashed by a malicious server via a handshake message.

Other sources

The ssl3sendclientkeyexchange function in s3clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.

— MITRE

Affected Software

61 affected componentsFixes available

redhat/openssl<1.0.1

1.0.1

redhat/openssl<0.9.8

0.9.8

OpenSSL OpenSSL=0.9.8

OpenSSL OpenSSL=0.9.8a

OpenSSL OpenSSL=0.9.8b

OpenSSL OpenSSL=0.9.8c

OpenSSL OpenSSL=0.9.8d

OpenSSL OpenSSL=0.9.8e

OpenSSL OpenSSL=0.9.8f

OpenSSL OpenSSL=0.9.8g

OpenSSL OpenSSL=0.9.8h

OpenSSL OpenSSL=0.9.8i

OpenSSL OpenSSL=0.9.8j

OpenSSL OpenSSL=0.9.8k

OpenSSL OpenSSL=0.9.8l

OpenSSL OpenSSL=0.9.8m

OpenSSL OpenSSL=0.9.8m-beta1

OpenSSL OpenSSL=0.9.8n

OpenSSL OpenSSL=0.9.8o

OpenSSL OpenSSL=0.9.8p

OpenSSL OpenSSL=0.9.8q

OpenSSL OpenSSL=0.9.8r

OpenSSL OpenSSL=0.9.8s

OpenSSL OpenSSL=0.9.8t

OpenSSL OpenSSL=0.9.8u

OpenSSL OpenSSL=0.9.8v

OpenSSL OpenSSL=0.9.8w

OpenSSL OpenSSL=0.9.8x

OpenSSL OpenSSL=0.9.8y

OpenSSL OpenSSL=0.9.8za

OpenSSL OpenSSL=1.0.0

OpenSSL OpenSSL=1.0.0-beta1

OpenSSL OpenSSL=1.0.0-beta2

OpenSSL OpenSSL=1.0.0-beta3

OpenSSL OpenSSL=1.0.0-beta4

OpenSSL OpenSSL=1.0.0-beta5

OpenSSL OpenSSL=1.0.0a

OpenSSL OpenSSL=1.0.0b

OpenSSL OpenSSL=1.0.0c

OpenSSL OpenSSL=1.0.0d

OpenSSL OpenSSL=1.0.0e

OpenSSL OpenSSL=1.0.0f

OpenSSL OpenSSL=1.0.0g

OpenSSL OpenSSL=1.0.0h

OpenSSL OpenSSL=1.0.0i

OpenSSL OpenSSL=1.0.0j

OpenSSL OpenSSL=1.0.0k

OpenSSL OpenSSL=1.0.0l

OpenSSL OpenSSL=1.0.0m

OpenSSL OpenSSL=1.0.1

OpenSSL OpenSSL=1.0.1-beta1

OpenSSL OpenSSL=1.0.1-beta2

OpenSSL OpenSSL=1.0.1-beta3

OpenSSL OpenSSL=1.0.1a

OpenSSL OpenSSL=1.0.1b

OpenSSL OpenSSL=1.0.1c

OpenSSL OpenSSL=1.0.1d

OpenSSL OpenSSL=1.0.1e

OpenSSL OpenSSL=1.0.1f

OpenSSL OpenSSL=1.0.1g

OpenSSL OpenSSL=1.0.1h

Event History

Aug 13, 2014

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3510?

CVE-2014-3510 is rated as a high severity vulnerability due to its potential to crash applications using vulnerable OpenSSL versions.

How do I fix CVE-2014-3510?