CVE-2014-3512: Buffer Overflow

Published Aug 13, 2014

Updated

Multiple buffer overflows in crypto/srp/srplib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.

Affected Software

31 affected components

OpenSSL OpenSSL=1.0.0

OpenSSL OpenSSL=1.0.0-beta1

OpenSSL OpenSSL=1.0.0-beta2

OpenSSL OpenSSL=1.0.0-beta3

OpenSSL OpenSSL=1.0.0-beta4

OpenSSL OpenSSL=1.0.0-beta5

OpenSSL OpenSSL=1.0.0a

OpenSSL OpenSSL=1.0.0b

OpenSSL OpenSSL=1.0.0c

OpenSSL OpenSSL=1.0.0d

OpenSSL OpenSSL=1.0.0e

OpenSSL OpenSSL=1.0.0f

OpenSSL OpenSSL=1.0.0g

OpenSSL OpenSSL=1.0.0h

OpenSSL OpenSSL=1.0.0i

OpenSSL OpenSSL=1.0.0j

OpenSSL OpenSSL=1.0.0k

OpenSSL OpenSSL=1.0.0l

OpenSSL OpenSSL=1.0.0m

OpenSSL OpenSSL=1.0.1

OpenSSL OpenSSL=1.0.1-beta1

OpenSSL OpenSSL=1.0.1-beta2

OpenSSL OpenSSL=1.0.1-beta3

OpenSSL OpenSSL=1.0.1a

OpenSSL OpenSSL=1.0.1b

OpenSSL OpenSSL=1.0.1c

OpenSSL OpenSSL=1.0.1d

OpenSSL OpenSSL=1.0.1e

OpenSSL OpenSSL=1.0.1f

OpenSSL OpenSSL=1.0.1g

OpenSSL OpenSSL=1.0.1h

Event History

Aug 13, 2014

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3512?

CVE-2014-3512 is classified as a high severity vulnerability due to its potential to allow remote attackers to cause a denial of service.

How do I fix CVE-2014-3512?

To fix CVE-2014-3512, update OpenSSL to version 1.0.1i or later.

Which versions of OpenSSL are affected by CVE-2014-3512?

CVE-2014-3512 affects OpenSSL versions from 1.0.0 to 1.0.1h, including various beta releases.

What impact can CVE-2014-3512 have on systems?

CVE-2014-3512 can lead to application crashes, impacting availability and potentially allowing for further exploits.

Is CVE-2014-3512 a remote or local vulnerability?

CVE-2014-3512 is a remote vulnerability, allowing attackers to exploit it without physical access to the affected systems.