Buffer overflow in OpenSSL - CVE-2014-0195

Vulnerability identifier: #VU11533

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-0195

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in OpenSSL when processing DTLS fragments to an OpenSSL DTLS client or server. A remote attacker can send a specially crafted request to vulnerable application and cause the server to crash or execute arbitrary code on the target system.

Successful exploitation of the vulnerability requires that server support DTLS.

OpenSSL
HPE Operations Orchestration
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Fedora
Red Hat Enterprise Linux EUS Compute Node
SUSE Linux
Opensuse
Ubuntu
Slackware Linux
openssl (Ubuntu package)
mingw-openssl
Operations Analytics
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1
TMS RAMSAN 720 and 820 machine type 9834 -AS2 & AE2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2
IBM BladeCenter Advanced Management Module
HP Smart Update Manager

Update to version 0.9.8za, 1.0.0m or 1.0.1h.

openssl (Ubuntu package) - update to 0.9.8k-7ubuntu8.21
mingw-openssl - addressed in versions 1.0.1j-1.el7, 1.0.1j-1.fc21
IBM BladeCenter Advanced Management Module - update to 3.66F
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1 - update to 5.6.2
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1 - update to 5.6.2
TMS RAMSAN 720 and 820 machine type 9834 -AS2 & AE2 - update to 6.3.2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2 - update to 6.3.2
HP Smart Update Manager - update to 6.4.1

• Exploit #70 - OpenSSL DTLS Fragment Buffer Overflow DoS (March 18, 2020)

• https://www.openssl.org/news/secadv/20140605.txt

• Multiple vulnerabilities in OpenSSL
• Ubuntu update for OpenSSL
• Ubuntu update for OpenSSL
• Ubuntu update for OpenSSL
• Ubuntu update for OpenSSL
• Gentoo update for OpenSSL
• Slackware Linux update for openssl
• openSUSE update for openssl
• openSUSE update for openssl
• SUSE Linux update for OpenSSL 1.0
• Red Hat update for openssl
• Red Hat update for openssl
• Multiple vulnerabilities in IBM FlashSystem (and TMS RAMSAN) 710, 720, 810, and 820 systems
• Multiple vulnerabilities in HP Software Operation Orchestration
• Multiple vulnerabilities in HP Operations Analytics
• Multiple vulnerabilities in HP Smart Update Manager (HP SUM)
• Multiple vulnerabilities in IBM BladeCenter Advanced Management Module
• Fedora 21 update for mingw-openssl
• Fedora EPEL 7 update for mingw-openssl