CVE-2014-3470: fedoraproject fedora NULL Pointer Dereference

Modified

AliasesUBUNTU-CVE-2014-3470DEBIAN-CVE-2014-3470

Published 05-06-2014Last modified 06-08-2024

Vulnerability summary

CVE-2014-3470 is a medium (CVSS 4.3) NULL Pointer Dereference vulnerability in fedoraproject fedora. EPSS estimates a 85.78% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

85.78%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 5

DLA-0003-1 DSA-2950-1 MGASA-2014-0255 OPENSUSE-SU-2024:11127-1 RHSA-2014:0625 RHSA-2014:0628+5 more

Timeline

05-06-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

85.78%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 85.78% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Suse4 products

Opensuse2 products

leapEOL42.1
opensuseEOL13.2

Redhat2 products

enterprise_linuxEOL5 | 6.0
storage2.1

Debian1 product

openssl< 1.0.1h-1

Fedoraproject1 product

fedoraEOL19 | 20

Mariadb1 product

mariadb≥ 10.0.0, < 10.0.13

Openssl1 product

openssl< 0.9.8za | ≥ 1.0.0, < 1.0.0m | ≥ 1.0.1, < 1.0.1h

Ubuntu1 product

openssl< 1.0.1f-1ubuntu2.2

8 vendors · 13 products

References

155 links

secunia.com/advisories/59342Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59669Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59525Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21675626X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59282Third Party AdvisoryX Refsource SECUNIANot Applicable
www.novell.com/support/kb/doc.php?id=7015300X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59990Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59264Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59126Third Party AdvisoryX Refsource SECUNIANot Applicable
www.novell.com/support/kb/doc.php?id=7015264X Refsource CONFIRMThird Party Advisory

Show all 100 references

secunia.com/advisories/59306Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21678289X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59445Third Party AdvisoryX Refsource SECUNIANot Applicable
www.vmware.com/security/advisories/VMSA-2014-0012.htmlX Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140266410314613&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59340Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/61254Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21676655X Refsource CONFIRMThird Party Advisory
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=EX Refsource CONFIRMBroken Link
secunia.com/advisories/59223Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59895Third Party AdvisoryX Refsource SECUNIANot Applicable
git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=8011cd56e39a433b1837465259a9bd24a38727fbX Refsource CONFIRM
secunia.com/advisories/59449Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=isg400001843X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59442Third Party AdvisoryX Refsource SECUNIANot Applicable
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140317760000786&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676879X Refsource CONFIRMBroken Link
www-01.ibm.com/support/docview.wss?uid=swg24037761X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21677828X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59441Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=140621259019789&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/59189Third Party AdvisoryX Refsource SECUNIANot Applicable
www.mandriva.com/security/advisories?name=MDVSA-2014:106Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/58742Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59300Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/58667Third Party AdvisoryX Refsource SECUNIANot Applicable
security.gentoo.org/glsa/glsa-201407-05.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/59191Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59284Third Party AdvisoryX Refsource SECUNIANot Applicable
www.ibm.com/support/docview.wss?uid=swg24037783X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59365Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21677695X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676529X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59483Third Party AdvisoryX Refsource SECUNIANot Applicable
www.securityfocus.com/archive/1/534161/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/59495Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=nas8N1020163X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676889X Refsource CONFIRMBroken Link
lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
secunia.com/advisories/58945Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=isg400001841X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59659Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59440Third Party AdvisoryX Refsource SECUNIANot Applicable
lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59655Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/58716Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21676071X Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21677836X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59437Third Party AdvisoryX Refsource SECUNIANot Applicable
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754X Refsource CONFIRMBroken Link
www.vmware.com/security/advisories/VMSA-2014-0006.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59310Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21676501X Refsource CONFIRMThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlX Refsource CONFIRMPatchThird Party Advisory
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascX Refsource CONFIRMThird Party Advisory
www.splunk.com/view/SP-CAAAM2DX Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.ibm.com/support/docview.wss?uid=swg21676793X Refsource CONFIRMThird Party Advisory
www.ibm.com/support/docview.wss?uid=swg21676356X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=140389274407904&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
support.citrix.com/article/CTX140876X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59167Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59120Third Party AdvisoryX Refsource SECUNIANot Applicable
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757X Refsource CONFIRMBroken Link
marc.info?l=bugtraq&m=140499827729550&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2014:105Vendor AdvisoryX Refsource MANDRIVABroken Link
secunia.com/advisories/59460Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/58939Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59514Third Party AdvisoryX Refsource SECUNIANot Applicable
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-opensslVendor AdvisoryX Refsource CISCOThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=KB29195X Refsource CONFIRMPermissions RequiredThird Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10075X Refsource CONFIRMBroken Link
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlX Refsource CONFIRMThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21676419X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59438Third Party AdvisoryX Refsource SECUNIANot Applicable
www-01.ibm.com/support/docview.wss?uid=swg21676496X Refsource CONFIRMBroken Link
secunia.com/advisories/58714Third Party AdvisoryX Refsource SECUNIANot Applicable
marc.info?l=bugtraq&m=140482916501310&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.htmlX Refsource CONFIRMThird Party Advisory
www.openssl.org/news/secadv_20140605.txtX Refsource CONFIRMVendor Advisory
secunia.com/advisories/58615Third Party AdvisoryX Refsource SECUNIANot Applicable
seclists.org/fulldisclosure/2014/Dec/23Mailing ListX Refsource FULLDISCThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
support.apple.com/kb/HT6443X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/59301Third Party AdvisoryX Refsource SECUNIANot Applicable
secunia.com/advisories/59784Third Party AdvisoryX Refsource SECUNIANot Applicable
kb.bluecoat.com/index?page=content&id=SA80X Refsource CONFIRMBroken Link
marc.info?l=bugtraq&m=140904544427729&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory

Showing 100 of 155.