NULL pointer dereference in OpenSSL - CVE-2014-0198

Vulnerability identifier: #VU11534

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-0198

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the in the do_ssl3_write() function in OpenSSL. A remote attacker can send a specially crafted request to vulnerable application and trigger denial of service attack.

Successful exploitation of the vulnerability requires that SSL_MODE_RELEASE_BUFFERS is enabled.

OpenSSL
Debian Linux
Gentoo Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Fedora
Red Hat Enterprise Linux EUS Compute Node
SUSE Linux
Ubuntu
Slackware Linux
openssl (Alpine package)
mingw-openssl
HPE OneView
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1
TMS RAMSAN 720 and 820 machine type 9834 -AS2 & AE2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2
IBM BladeCenter Advanced Management Module
HP Smart Update Manager

Update to version 1.0.0m or 1.0.1h.

openssl (Alpine package) - update to 1.0.1g-r2
mingw-openssl - addressed in versions 1.0.1j-1.el7, 1.0.1j-1.fc21
IBM BladeCenter Advanced Management Module - update to 3.66F
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1 - update to 5.6.2
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1 - update to 5.6.2
TMS RAMSAN 720 and 820 machine type 9834 -AS2 & AE2 - update to 6.3.2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2 - update to 6.3.2
HP Smart Update Manager - update to 6.4.1

• https://www.openssl.org/news/secadv/20140605.txt

• Multiple vulnerabilities in OpenSSL
• Ubuntu update for OpenSSL
• Debian update for openssl
• Gentoo update for OpenSSL
• Slackware Linux update for openssl
• SUSE Linux update for OpenSSL 1.0
• Red Hat update for openssl
• Red Hat update for openssl
• NULL pointer dereference in openssl (Alpine package)
• Multiple vulnerabilities in IBM FlashSystem (and TMS RAMSAN) 710, 720, 810, and 820 systems
• Multiple vulnerabilities in HP OneView
• Multiple vulnerabilities in HP Smart Update Manager (HP SUM)
• Multiple vulnerabilities in IBM BladeCenter Advanced Management Module
• Fedora 21 update for mingw-openssl
• Fedora EPEL 7 update for mingw-openssl