CVE-2014-0198

Publication date 2 May 2014

Last updated 24 July 2024

Ubuntu priority

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
openssl	14.04 LTS trusty	Fixed 1.0.1f-1ubuntu2.1
	13.10 saucy	Fixed 1.0.1e-3ubuntu1.3
	12.10 quantal	Fixed 1.0.1c-3ubuntu2.8
	12.04 LTS precise	Fixed 1.0.1-4ubuntu5.13
	10.04 LTS lucid	Not affected
openssl098	14.04 LTS trusty	Not in release
	13.10 saucy	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Not in release

Notes

mdeslaur

introduced by https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=8671b898609777c95aedf33743419a523874e6e8

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
openssl	Vendor: lib/lib Vendor: http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/005_openssl.patch.sig

References

Related Ubuntu Security Notices (USN)