Unrated severityNVD Advisory· Published Jun 5, 2014· Updated Jun 17, 2026

CVE-2014-3470

Description

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MariaDB/MariaDB
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
Range: >=10.0.0,<10.0.13
OpenSSL Project/OpenSSL2 versions
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*range: <0.9.8za
- (no CPE)range: <0.9.8za, >=1.0.0 <1.0.0m, >=1.0.1 <1.0.1h
Red Hat/Storage
cpe:2.3:a:redhat:storage:2.1:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
OpenSUSE/Leap
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server2 versions
cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Desktop
cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Server
cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Software Development Kit
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*
SUSE S.A./Linux Enterprise Workstation Extension
cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:*:*:*:*:*:*:*
osv-coords32 versions
pkg:rpm/opensuse/openssl-1_1&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012 pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012 pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012
< 1.1.1l-1.2+ 31 more
- (no CPE)range: < 1.1.1l-1.2
- (no CPE)range: < 4.8.6-7.3
- (no CPE)range: < 4.8.6-7.3
- (no CPE)range: < 4.8.6-7.3
- (no CPE)range: < 4.8.6-7.3
- (no CPE)range: < 4.8.6-7.3
- (no CPE)range: < 4.8.6-7.3
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 4.8.6-7.1
- (no CPE)range: < 10.0.16-15.1
- (no CPE)range: < 10.0.16-15.1
- (no CPE)range: < 10.0.16-15.1
- (no CPE)range: < 10.0.16-15.1
- (no CPE)range: < 10.0.16-15.1

Patches

Vulnerability mechanics

References

150

www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlnvdPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
aix.software.ibm.com/aix/efixes/security/openssl_advisory9.ascnvdThird Party Advisory
kb.juniper.net/InfoCenter/indexnvdThird Party Advisory
kb.juniper.net/InfoCenter/indexnvdPermissions RequiredThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.htmlnvdMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlnvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
marc.infonvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2014/Dec/23nvdMailing ListThird Party Advisory
security.gentoo.org/glsa/glsa-201407-05.xmlnvdThird Party Advisory
support.apple.com/kb/HT6443nvdThird Party Advisory
support.citrix.com/article/CTX140876nvdThird Party Advisory
support.f5.com/kb/en-us/solutions/public/15000/300/sol15342.htmlnvdThird Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-opensslnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdBroken LinkThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www-01.ibm.com/support/docview.wssnvdThird Party Advisory
www.blackberry.com/btsc/KB36051nvdThird Party Advisory
www.f-secure.com/en/web/labs_global/fsc-2014-6nvdThird Party Advisory
www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htmnvdThird Party Advisory
www.ibm.com/support/docview.wssnvdThird Party Advisory
www.ibm.com/support/docview.wssnvdThird Party Advisory
www.ibm.com/support/docview.wssnvdThird Party Advisory
www.novell.com/support/kb/doc.phpnvdThird Party Advisory
www.novell.com/support/kb/doc.phpnvdThird Party Advisory
www.openssl.org/news/secadv_20140605.txtnvdVendor Advisory
www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlnvdThird Party Advisory
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlnvdThird Party Advisory
www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.htmlnvdThird Party Advisory
www.securityfocus.com/archive/1/534161/100/0/threadednvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/67898nvdThird Party AdvisoryVDB Entry
www.splunk.com/view/SP-CAAAM2DnvdThird Party Advisory
www.vmware.com/security/advisories/VMSA-2014-0006.htmlnvdThird Party Advisory
www.vmware.com/security/advisories/VMSA-2014-0012.htmlnvdThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-234763.pdfnvdThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvdThird Party Advisory
www.novell.com/support/kb/doc.phpnvdThird Party Advisory
secunia.com/advisories/58337nvdNot Applicable
secunia.com/advisories/58579nvdNot Applicable
secunia.com/advisories/58615nvdNot Applicable
secunia.com/advisories/58667nvdNot Applicable
secunia.com/advisories/58713nvdNot Applicable
secunia.com/advisories/58714nvdNot Applicable
secunia.com/advisories/58716nvdNot Applicable
secunia.com/advisories/58742nvdNot Applicable
secunia.com/advisories/58797nvdNot Applicable
secunia.com/advisories/58939nvdNot Applicable
secunia.com/advisories/58945nvdNot Applicable
secunia.com/advisories/58977nvdNot Applicable
secunia.com/advisories/59120nvdNot Applicable
secunia.com/advisories/59126nvdNot Applicable
secunia.com/advisories/59162nvdNot Applicable
secunia.com/advisories/59167nvdNot Applicable
secunia.com/advisories/59175nvdNot Applicable
secunia.com/advisories/59189nvdNot Applicable
secunia.com/advisories/59191nvdNot Applicable
secunia.com/advisories/59192nvdNot Applicable
secunia.com/advisories/59223nvdNot Applicable
secunia.com/advisories/59264nvdNot Applicable
secunia.com/advisories/59282nvdNot Applicable
secunia.com/advisories/59284nvdNot Applicable
secunia.com/advisories/59287nvdNot Applicable
secunia.com/advisories/59300nvdNot Applicable
secunia.com/advisories/59301nvdNot Applicable
secunia.com/advisories/59306nvdNot Applicable
secunia.com/advisories/59310nvdNot Applicable
secunia.com/advisories/59340nvdNot Applicable
secunia.com/advisories/59342nvdNot Applicable
secunia.com/advisories/59362nvdNot Applicable
secunia.com/advisories/59364nvdNot Applicable
secunia.com/advisories/59365nvdNot Applicable
secunia.com/advisories/59413nvdNot Applicable
secunia.com/advisories/59431nvdNot Applicable
secunia.com/advisories/59437nvdNot Applicable
secunia.com/advisories/59438nvdNot Applicable
secunia.com/advisories/59440nvdNot Applicable
secunia.com/advisories/59441nvdNot Applicable
secunia.com/advisories/59442nvdNot Applicable
secunia.com/advisories/59445nvdNot Applicable
secunia.com/advisories/59449nvdNot Applicable
secunia.com/advisories/59450nvdNot Applicable
secunia.com/advisories/59451nvdNot Applicable
secunia.com/advisories/59459nvdNot Applicable
secunia.com/advisories/59460nvdNot Applicable
secunia.com/advisories/59483nvdNot Applicable
secunia.com/advisories/59490nvdNot Applicable
secunia.com/advisories/59491nvdNot Applicable
secunia.com/advisories/59495nvdNot Applicable
secunia.com/advisories/59514nvdNot Applicable
secunia.com/advisories/59518nvdNot Applicable
secunia.com/advisories/59525nvdNot Applicable
secunia.com/advisories/59655nvdNot Applicable
secunia.com/advisories/59659nvdNot Applicable
secunia.com/advisories/59666nvdNot Applicable
secunia.com/advisories/59669nvdNot Applicable
secunia.com/advisories/59721nvdNot Applicable
secunia.com/advisories/59784nvdNot Applicable
secunia.com/advisories/59895nvdNot Applicable
secunia.com/advisories/59916nvdNot Applicable
secunia.com/advisories/59990nvdNot Applicable
secunia.com/advisories/60571nvdNot Applicable
secunia.com/advisories/61254nvdNot Applicable
www-01.ibm.com/support/docview.wssnvdBroken Link
www-01.ibm.com/support/docview.wssnvdBroken Link
www-01.ibm.com/support/docview.wssnvdBroken Link
www-01.ibm.com/support/docview.wssnvdBroken Link
www-01.ibm.com/support/docview.wssnvdBroken Link
www-01.ibm.com/support/docview.wssnvdBroken Link
www-947.ibm.com/support/entry/portal/docdisplaynvdBroken Link
www-947.ibm.com/support/entry/portal/docdisplaynvdBroken Link
www-947.ibm.com/support/entry/portal/docdisplaynvdBroken Link
www-947.ibm.com/support/entry/portal/docdisplaynvdBroken Link
www.mandriva.com/security/advisoriesnvdBroken Link
www.mandriva.com/security/advisoriesnvdBroken Link
www.mandriva.com/security/advisoriesnvdBroken Link
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjdnvdBroken Link
www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjdnvdBroken Link
kb.bluecoat.com/indexnvdBroken Link
kc.mcafee.com/corporate/indexnvdBroken Link
git.openssl.org/gitweb/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.069
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000