CVE-2014-0221: fedoraproject fedora

Modified

AliasesUBUNTU-CVE-2014-0221DEBIAN-CVE-2014-0221

Published 05-06-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-0221 is a medium (CVSS 4.3) vulnerability in fedoraproject fedora. EPSS estimates a 87.89% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

87.89%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 5

DLA-0003-1 DSA-2950-1 MGASA-2014-0255 OPENSUSE-SU-2024:11127-1 RHSA-2014:0625 RHSA-2014:0628+6 more

Timeline

05-06-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

87.89%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 87.89% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Suse4 products

Opensuse2 products

leapEOL42.1
opensuseEOL13.2

Redhat2 products

enterprise_linuxEOL5 | 6.0
storage2.1

Ubuntu2 products

openssl< 1.0.1f-1ubuntu2.2
openssl098< 0.9.8o-7ubuntu3.2.14.04.1

Debian1 product

openssl< 1.0.1h-1

Fedoraproject1 product

fedoraEOL19 | 20

Mariadb1 product

mariadb≥ 10.0.0, < 10.0.13

Openssl1 product

openssl≥ 0.9.8, < 0.9.8za | ≥ 1.0.0, < 1.0.0m | ≥ 1.0.1, < 1.0.1h

8 vendors · 14 products

References

132 links

secunia.com/advisories/59342Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59669Third Party AdvisoryX Refsource SECUNIANot Applicable
www.novell.com/support/kb/doc.php?id=7015300X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59990Third Party AdvisoryX Refsource SECUNIANot Applicable
www.securitytracker.com/id/1030337VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
secunia.com/advisories/59454Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59126Third Party AdvisoryX Refsource SECUNIANot Applicable
www.novell.com/support/kb/doc.php?id=7015264X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59306Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21678289X Refsource CONFIRMThird Party Advisory

Show all 100 references

www.vmware.com/security/advisories/VMSA-2014-0012.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140266410314613&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/61254Third Party AdvisoryX Refsource SECUNIANot Applicable
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=EX Refsource CONFIRMBroken Link
secunia.com/advisories/59895Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59449Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=isg400001843X Refsource CONFIRMThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140317760000786&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676879X Refsource CONFIRMBroken Link
www-01.ibm.com/support/docview.wss?uid=swg21677828X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59441Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=140621259019789&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59189Third Party AdvisoryX Refsource SECUNIANot Applicable
www.mandriva.com/security/advisories?name=MDVSA-2014:106Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/59300Third Party AdvisoryX Refsource SECUNIANot Applicable
security.gentoo.org/glsa/glsa-201407-05.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/59284Third Party AdvisoryX Refsource SECUNIANot Applicable
www.ibm.com/support/docview.wss?uid=swg24037783X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59365Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21677695X Refsource CONFIRMThird Party Advisory
www.securityfocus.com/archive/1/534161/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/59495Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=nas8N1020163X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676889X Refsource CONFIRMBroken Link
lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
secunia.com/advisories/58945Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=isg400001841X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59659Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/59429Third Party AdvisoryX Refsource SECUNIANot Applicable
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59655Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21676071X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59437Third Party AdvisoryX Refsource SECUNIANot Applicable
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754X Refsource CONFIRMBroken Link
www.vmware.com/security/advisories/VMSA-2014-0006.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59310Third Party AdvisoryX Refsource SECUNIANot Applicable
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlX Refsource CONFIRMPatchThird Party Advisory
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascX Refsource CONFIRMThird Party Advisory
www.fortiguard.com/advisory/FG-IR-14-018/X Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ibm.com/support/docview.wss?uid=swg21676793X Refsource CONFIRMBroken Link
www.ibm.com/support/docview.wss?uid=swg21676356X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140389274407904&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
support.citrix.com/article/CTX140876X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59167Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59120Third Party AdvisoryX Refsource SECUNIANot Applicable
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757X Refsource CONFIRMBroken Link
marc.info?l=bugtraq&m=140499827729550&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2014:105Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/59460Third Party AdvisoryX Refsource SECUNIANot Applicable
rhn.redhat.com/errata/RHSA-2014-1021.htmlVendor AdvisoryX Refsource REDHATBroken Link
secunia.com/advisories/58939Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59027Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59514Third Party AdvisoryX Refsource SECUNIANot Applicable
www.ibm.com/support/docview.wss?uid=swg21676226X Refsource CONFIRMBroken Link
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-opensslVendor AdvisoryX Refsource CISCOThird Party Advisory
www.securityfocus.com/bid/67901VDB EntryX Refsource BIDThird Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10075X Refsource CONFIRMBroken Link
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59221Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21676419X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/58714Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=140482916501310&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.openssl.org/news/secadv_20140605.txtX Refsource CONFIRMVendor Advisory
secunia.com/advisories/58615Third Party AdvisoryX Refsource SECUNIANot Applicable
seclists.org/fulldisclosure/2014/Dec/23Mailing ListX Refsource FULLDISCThird Party Advisory
support.apple.com/kb/HT6443X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59301Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59784Third Party AdvisoryX Refsource SECUNIANot Applicable
kb.bluecoat.com/index?page=content&id=SA80X Refsource CONFIRMBroken Link
marc.info?l=bugtraq&m=140904544427729&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10629X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21678167X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59192Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
marc.info?l=bugtraq&m=140752315422991&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
marc.info?l=bugtraq&m=140389355508263&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59175Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=140448122410568&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59666Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=140431828824371&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59413Third Party AdvisoryX Refsource SECUNIANot Applicable
www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlX Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21675821X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59721Third Party AdvisoryX Refsource SECUNIANot Applicable
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756X Refsource CONFIRMBroken Link
www-01.ibm.com/support/docview.wss?uid=swg21676062X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/58713Third Party AdvisoryX Refsource SECUNIANot Applicable

Showing 100 of 132.