CVE-2014-3470— OpenSSL 安全漏洞
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2014-3470 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
OpenSSL 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
OpenSSL是OpenSSL团队开发的一个开源的能够实现安全套接层（SSL v2/v3）和安全传输层（TLS v1）协议的通用加密库，它支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL的s3_clnt.c文件中的‘ssl3_send_client_key_exchange’函数存在安全漏洞。当使用匿名的ECDH密码套件时，远程攻击者可利用该漏洞造成拒绝服务（空指针逆向引用和客户端崩溃）。以下版本受到影响：OpenSSL 0.9.8y及之前的版本，1.0.0m之前的1.0.0版本
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
二、漏洞 CVE-2014-3470 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | None | https://github.com/hshivhare67/OpenSSL_1.0.1g_CVE-2014-3470 | POC详情 |
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2014-3470 的情报信息
请登录查看更多情报信息。
- http://www.vmware.com/security/advisories/VMSA-2014-0006.htmlx_refsource_CONFIRM
- http://support.apple.com/kb/HT6443x_refsource_CONFIRM
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=isg400001841x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21677828x_refsource_CONFIRM
- https://kc.mcafee.com/corporate/index?page=content&id=SB10075x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676889x_refsource_CONFIRM
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlx_refsource_CONFIRM
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757x_refsource_CONFIRM
- http://www.novell.com/support/kb/doc.php?id=7015264x_refsource_CONFIRM
- http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlx_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21678289x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21683332x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21677695x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676655x_refsource_CONFIRM
- http://www.splunk.com/view/SP-CAAAM2Dx_refsource_CONFIRM
- http://www.novell.com/support/kb/doc.php?id=7015300x_refsource_CONFIRM
- http://www.f-secure.com/en/web/labs_global/fsc-2014-6x_refsource_CONFIRM
- https://kb.bluecoat.com/index?page=content&id=SA80x_refsource_CONFIRM
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629x_refsource_CONFIRM
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascx_refsource_CONFIRM
- http://www.ibm.com/support/docview.wss?uid=swg21676356x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21677527x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=1103600x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21677836x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21675626x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676035x_refsource_CONFIRM
- https://www.novell.com/support/kb/doc.php?id=7015271x_refsource_CONFIRM
- http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlx_refsource_CONFIRM
- http://www.openssl.org/news/secadv_20140605.txtx_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676529x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676501x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21673137x_refsource_CONFIRM
- http://www.ibm.com/support/docview.wss?uid=swg24037783x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676419x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676615x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163x_refsource_CONFIRM
- http://www.blackberry.com/btsc/KB36051x_refsource_CONFIRM
- http://www.ibm.com/support/docview.wss?uid=swg21676793x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21678167x_refsource_CONFIRM
- http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195x_refsource_CONFIRM
- http://support.citrix.com/article/CTX140876x_refsource_CONFIRM
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755x_refsource_CONFIRM
- http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756x_refsource_CONFIRM
- http://www.vmware.com/security/advisories/VMSA-2014-0012.htmlx_refsource_CONFIRM
- http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.htmlx_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21675821x_refsource_CONFIRM
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlx_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676496x_refsource_CONFIRM
- http://www-01.ibm.com/support/docview.wss?uid=swg21676071x_refsource_CONFIRM
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlvendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlvendor-advisoryx_refsource_FEDORA
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlvendor-advisoryx_refsource_SUSE
- https://nvd.nist.gov/vuln/detail/CVE-2014-3470
同批安全公告 · n/a · 2014-06-05 · 共 30 条
| CVE-2014-3969 | Xen 权限许可和访问控制漏洞 | |
| CVE-2014-2051 | OwnCloud Server 代码注入漏洞 | |
| CVE-2013-0304 | OwnCloud Server 安全绕过漏洞 | |
| CVE-2013-0302 | OwnCloud Server 未明远程信息泄露漏洞 | |
| CVE-2014-3976 | A10 Networks Advanced Core Operating System 缓冲区溢出漏洞 | |
| CVE-2014-3975 | AuraCMS 绝对路径遍历漏洞 | |
| CVE-2014-3974 | AuraCMS 跨站脚本漏洞 | |
| CVE-2014-3973 | FrontAccounting SQL注入漏洞 | |
| CVE-2014-3940 | Linux kernel 拒绝服务漏洞 | |
| CVE-2014-3917 | Linux kernel 安全漏洞 | |
| CVE-2014-3912 | Samsung iPOLiS Device Manager 基于栈的缓冲区溢出漏洞 | |
| CVE-2014-3878 | Ipswitch IMail Server 跨站脚本漏洞 | |
| CVE-2014-2577 | Bottomline Technologies Transform Foundation Server 跨站脚本漏洞 | |
| CVE-2014-1998 | Nippon Institute of Agroinformatics SOY CMS 跨站脚本漏洞 | |
| CVE-2014-1997 | ATEN CN8000 拒绝服务漏洞 | |
| CVE-2014-0224 | OpenSSL 加密问题漏洞 | |
| CVE-2014-3968 | Xen 拒绝服务漏洞 | |
| CVE-2014-3967 | Xen 拒绝服务漏洞 | |
| CVE-2014-3469 | GNU Libtasn1 代码问题漏洞 | |
| CVE-2014-3468 | GNU Libtasn1 数字错误漏洞 |
显示前 20 条，共 30 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-3470
暂无评论