CVE-2014-0198: debian debian_linux NULL Pointer Dereference

Modified

AliasesMGASA-2014-0204UBUNTU-CVE-2014-0198DEBIAN-CVE-2014-0198+1 more

Published 06-05-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-0198 is a medium (CVSS 4.3) NULL Pointer Dereference vulnerability in debian debian_linux. EPSS estimates a 40.31% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

40.31%

0%100%

High · -3.52 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 3

OPENSUSE-SU-2024:11127-1 RHSA-2014:0625 RHSA-2014:0628 RHSA-2014:0679 SUSE-SU-2015:0743-1 USN-2192-1

Timeline

06-05-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

40.31%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

Decrease -3.52 pp

From 43.83% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Suse4 products

Debian2 products

openssl< 1.0.1e-2+deb7u9 | < 1.0.1g-4
debian_linuxEOL6.0 | 7.0 | 8.0

Mageia2 products

openssl< 1.0.1e-1.8.mga3
openssl< 1.0.1e-8.5.mga4

Fedoraproject1 product

fedoraEOL19 | 20

Mariadb1 product

mariadb≥ 10.0.0, < 10.0.13

Openssl1 product

openssl≥ 1.0.0, ≤ 1.0.1g

Opensuse1 product

opensuseEOL12.3 | 13.1

Ubuntu1 product

openssl< 1.0.1f-1ubuntu2.1

8 vendors · 13 products

References

121 links

secunia.com/advisories/59342Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59669Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59525Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59282Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59990Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59264Third Party AdvisoryX Refsource SECUNIANot Applicable
support.f5.com/kb/en-us/solutions/public/15000/300/sol15329.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59126Third Party AdvisoryX Refsource SECUNIANot Applicable
www.securityfocus.com/bid/67193VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/59306Third Party AdvisoryX Refsource SECUNIANot Applicable

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=1093837X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
marc.info?l=bugtraq&m=140544599631400&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59190Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59529Third Party AdvisoryX Refsource SECUNIANot Applicable
www.vmware.com/security/advisories/VMSA-2014-0012.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/61254Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21676655X Refsource CONFIRMThird Party Advisory
puppetlabs.com/security/cve/cve-2014-0198X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59449Third Party AdvisoryX Refsource SECUNIANot Applicable
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676879X Refsource CONFIRMBroken Link
www-01.ibm.com/support/docview.wss?uid=swg21677828X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140621259019789&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59300Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/58667Third Party AdvisoryX Refsource SECUNIANot Applicable
security.gentoo.org/glsa/glsa-201407-05.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/59284Third Party AdvisoryX Refsource SECUNIANot Applicable
www.ibm.com/support/docview.wss?uid=swg24037783X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21677695X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676529X Refsource CONFIRMThird Party Advisory
advisories.mageia.org/MGASA-2014-0204.htmlX Refsource CONFIRMThird Party Advisory
www.securityfocus.com/archive/1/534161/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www-01.ibm.com/support/docview.wss?uid=nas8N1020163X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676889X Refsource CONFIRMBroken Link
lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
secunia.com/advisories/58945Third Party AdvisoryX Refsource SECUNIANot Applicable
www.openbsd.org/errata55.htmlVendor AdvisoryX Refsource OPENBSDThird Party Advisory
secunia.com/advisories/59440Third Party AdvisoryX Refsource SECUNIANot Applicable
rt.openssl.org/Ticket/Display.html?user=guest&pass=guest&id=3321X Refsource CONFIRMBroken Link
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59655Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59163Third Party AdvisoryX Refsource SECUNIANot Applicable
www.debian.org/security/2014/dsa-2931Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21677836X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59437Third Party AdvisoryX Refsource SECUNIANot Applicable
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754X Refsource CONFIRMBroken Link
secunia.com/advisories/59374Third Party AdvisoryX Refsource SECUNIANot Applicable
www.vmware.com/security/advisories/VMSA-2014-0006.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59310Third Party AdvisoryX Refsource SECUNIANot Applicable
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlX Refsource CONFIRMPatchThird Party Advisory
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascX Refsource CONFIRMThird Party Advisory
www.fortiguard.com/advisory/FG-IR-14-018/X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ibm.com/support/docview.wss?uid=swg21676356X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140389274407904&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
support.citrix.com/article/CTX140876X Refsource CONFIRMThird Party Advisory
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757X Refsource CONFIRMBroken Link
secunia.com/advisories/58939Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59514Third Party AdvisoryX Refsource SECUNIANot Applicable
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-opensslVendor AdvisoryX Refsource CISCOThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=KB29195X Refsource CONFIRMThird Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10075X Refsource CONFIRMBroken Link
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlX Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676419X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59438Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/58714Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=141658880509699&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.openssl.org/news/secadv_20140605.txtX Refsource CONFIRMVendor Advisory
seclists.org/fulldisclosure/2014/Dec/23Mailing ListX Refsource FULLDISCThird Party Advisory
secunia.com/advisories/60066Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59301Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.opensuse.org/opensuse-updates/2014-05/msg00036.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/59784Third Party AdvisoryX Refsource SECUNIANot Applicable
kb.bluecoat.com/index?page=content&id=SA80X Refsource CONFIRMBroken Link
marc.info?l=bugtraq&m=140904544427729&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10629X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21678167X Refsource CONFIRMThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
marc.info?l=bugtraq&m=140752315422991&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2014:080Vendor AdvisoryX Refsource MANDRIVABroken Link
marc.info?l=bugtraq&m=140389355508263&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=140448122410568&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59666Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=140431828824371&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59413Third Party AdvisoryX Refsource SECUNIANot Applicable
www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59721Third Party AdvisoryX Refsource SECUNIANot Applicable
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756X Refsource CONFIRMBroken Link
www-01.ibm.com/support/docview.wss?uid=swg21676062X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/58713Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21673137X Refsource CONFIRMBroken Link
www.mandriva.com/security/advisories?name=MDVSA-2015:062Vendor AdvisoryX Refsource MANDRIVABroken Link
www-01.ibm.com/support/docview.wss?uid=swg21676035X Refsource CONFIRMBroken Link
secunia.com/advisories/59450Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59287Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21683332X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59491Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/58977Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.opensuse.org/opensuse-updates/2014-05/msg00037.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.novell.com/support/kb/doc.php?id=7015271X Refsource CONFIRMThird Party Advisory

Showing 100 of 121.