Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
c.info/?l=bugtraq&m=141477196830952&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html - http://marc.info/?l=bugtraq&m=143290371927178&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1652.html - https://support.apple.com/kb/HT6535 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html - http://marc.info/?l=bugtraq&m=142546741516006&w=2 - http://rhn.redhat.com/errata/RHSA-2015-0086.html - http://marc.info/?l=bugtraq&m=143039249603103&w=2 - http://www.securitytracker.com/id/1031124 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://lists.opensuse.org/ope
/id/1031124 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html - http://rhn.redhat.com/errata/RHSA-2015-0080.html - http://marc.info/?l=bugtraq&m=142740155824959&w=2 - http://rhn.redhat.com/errata/RHSA-2014-1882.html - http://rhn.redhat.com/errata/RHSA-2015-0068.html - http://marc.info/?l=bugtraq&m=142354438527235&w=2 - http://www.ubuntu.com/usn/USN-2486-1 - http://marc.info/?l=bugtraq&m=144294141001552&w=2 - http://secunia.com/advisories/59627 - http://marc.info/?l=bugtraq&m=141814011518700&w=2 - http://marc.info/?l=bugtraq&m=142495837901899&w=2 - http://marc.info/?l=bugtraq&m=141694355519
q&m=141814011518700&w=2 - http://marc.info/?l=bugtraq&m=142495837901899&w=2 - http://marc.info/?l=bugtraq&m=141694355519663&w=2 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://marc.info/?l=bugtraq&m=143290437727362&w=2 - http://marc.info/?l=bugtraq&m=142350298616097&w=2 - https://support.lenovo.com/product_security/poodle - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle - http://marc.info/?l=bugtraq&m=141775427104070&w=2 - http://rhn.redhat.com/errata/RHSA-2015-0698.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://lists.opensuse.org/opensuse-security-announce/
cle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html - http://downloads.asterisk.org/pub/security/AST-2014-011.html - http://secunia.com/advisories/60859 - http://www.securityfocus.com/archive/1/533746 - https://security.gentoo.org/glsa/201507-14 - http://marc.info/?l=bugtraq&m=142624719706349&w=2 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm - http://secunia.com/advisories/61345 - http://marc.info/?l=bugtraq&m=143101048219218&w=2 - http://secunia.com/advisories/61019 - http://www.securityfocus.com/bid/7
://marc.info/?l=bugtraq&m=143101048219218&w=2 - http://secunia.com/advisories/61019 - http://www.securityfocus.com/bid/70574 - http://www.securitytracker.com/id/1031120 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://secunia.com/advisories/61825 - http://advisories.mageia.org/MGASA-2014-0416.html - http://www.securitytracker.com/id/1031029 - http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 - http://marc.info/?l=bugtraq&m=142624719706349&w=2 - http://marc.info/?l=bugtraq&m=142624590206005&w=2 - https://blog.mozilla.org/security/2014/10/14/the-pood
19706349&w=2 - http://marc.info/?l=bugtraq&m=142624590206005&w=2 - https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/ - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681 - http://marc.info/?l=bugtraq&m=143290522027658&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10104 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 - http://secunia.com/advisories/61782 - https://access.redhat.com/articles/1232123 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.fedoraproject.org/pipermail/pack
232123 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html - http://www.securitytracker.com/id/1031085 - http://marc.info/?l=bugtraq&m=144251162130364&w=2 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://marc.info/?l=bugtraq&m=143039249603103&w=2 - http://www.securityfocus.com/archive/1/533747 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142624679706236&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21687611 - https://github.com/mpgn/poodle-PoC - http://www.mandriva.com/security/advisories?name=MDVSA-2014:203 -
uid=swg21687611 - https://github.com/mpgn/poodle-PoC - http://www.mandriva.com/security/advisories?name=MDVSA-2014:203 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142607790919348&w=2 - http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html - https://support.citrix.com/article/CTX216642 - http://marc.info/?l=bugtraq&m=142354438527235&w=2 - https://puppet.com/security/cve/poodle-sslv3-vulnerability - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://secunia.com/advisories/61303 - http://marc.info/?l=bugtraq&m=142350743917559&w=
announce/2015/Jan/msg00003.html - http://secunia.com/advisories/61303 - http://marc.info/?l=bugtraq&m=142350743917559&w=2 - http://marc.info/?l=bugtraq&m=142496355704097&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21692299 - http://www.securitytracker.com/id/1031039 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html - http://www-01.ibm.com/support/docview.wss?uid=swg21687172 - http://marc.info/?l=bugtraq&m=142721830231196&w=2 - http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html - http://marc.info/?l=bugtraq&m=142624619906067 - http://www.securitytracker.com/id/1031089 - http://marc.info/?l=bugtraq&m=142350196615714&w=2 - http://mar
24619906067 - http://www.securitytracker.com/id/1031089 - http://marc.info/?l=bugtraq&m=142350196615714&w=2 - http://marc.info/?l=bugtraq&m=141628688425177&w=2 - http://www.us-cert.gov/ncas/alerts/TA14-290A - http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html - http://secunia.com/advisories/61819 - http://marc.info/?l=bugtraq&m=142357976805598&w=2 - http://www.securitytracker.com/id/1031088 - http://www.debian.org/security/2015/dsa-3147 - http://secunia.com/advisories/61995 - http://marc.info/?l=bugtraq&m=141703183219781&w=2 - http://www-01.ibm.com/support/docview.wss?uid=swg21686997 - https://kc.mcafee.com/corporate/index?page=content&id=SB10090 - http://marc
bm.com/support/docview.wss?uid=swg21686997 - https://kc.mcafee.com/corporate/index?page=content&id=SB10090 - http://marc.info/?l=bugtraq&m=142357976805598&w=2 - http://www.securitytracker.com/id/1031086 - http://marc.info/?l=bugtraq&m=143558192010071&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html - http://rhn.redhat.com/errata/RHSA-2014-1692.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html - https://www.openssl.org/~bodo/ssl-poodle.pdf - http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439 - http://marc.info/?l=bugtraq&m=143558137709884&w=2 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78
- http://marc.info/?l=bugtraq&m=143558137709884&w=2 - https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https:
apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E - https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E - https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7
CVE ID: CVE-2014-3567 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:50:18.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142103967620673&w=2 - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc - http://marc.info/?l=bugtraq&m=142804214608580&w=2 - http://lists.o
.ibm.com/aix/efixes/security/openssl_advisory11.asc - http://marc.info/?l=bugtraq&m=142804214608580&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://marc.info/?l=bugtraq&m=141477196830952&w=2 - http://secunia.com/advisories/61130 - https://www.openssl.org/news/secadv_20141015.txt - http://www.securitytracker.com/id/1031052 - http://secunia.com/advisories/62070 - http://www.securityfocus.com/bid/70586 - http://secunia.com/advisories/61073 - http://www.ubuntu.com/usn/USN-2385-1 - http://marc.info/?l=bugtraq&m=142791032306609&w=2 - http://security.gentoo.org/glsa/glsa-201412-39.x
om/usn/USN-2385-1 - http://marc.info/?l=bugtraq&m=142791032306609&w=2 - http://security.gentoo.org/glsa/glsa-201412-39.xml - http://www.debian.org/security/2014/dsa-3053 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - http://marc.info/?l=bugtraq&m=143290583027876&w=2 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://marc.info/?l=bugtraq&m=142495837901899&w=2 - https://support.apple.com/HT205217 - http://marc.info/?l=bugtraq&m=142103967620673&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=7fd4ce6a997be5f5c9e744ac527725c2850de203 - http://www.
ml - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=7fd4ce6a997be5f5c9e744ac527725c2850de203 - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10091 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc - http://www.splunk.com/view/SP-CAAANST - http://secunia.com/advisories/61837 - http://support.apple.com/HT204244 - http://marc.in
ww.splunk.com/view/SP-CAAANST - http://secunia.com/advisories/61837 - http://support.apple.com/HT204244 - http://marc.info/?l=bugtraq&m=141477196830952&w=2 - http://secunia.com/advisories/61207 - http://rhn.redhat.com/errata/RHSA-2014-1652.html - http://secunia.com/advisories/62124 - http://secunia.com/advisories/59627 - http://marc.info/?l=bugtraq&m=142495837901899&w=2 - http://secunia.com/advisories/61298 - http://marc.info/?l=bugtraq&m=143290437727362&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html - http://marc.info/?l=bugtraq&m=142834685803386&w=2 - http://secunia.com/advisories/61990 - http://secunia.com/advisories/61959 - https://blogs.oracle.com/sunse
5803386&w=2 - http://secunia.com/advisories/61990 - http://secunia.com/advisories/61959 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6 - http://advisories.mageia.org/MGASA-2014-0416.html - http://marc.info/?l=bugtraq&m=142624590206005&w=2 - http://marc.info/?l=bugtraq&m=143290522027658&w=2 - http://rhn.redhat.com/errata/RHSA-2015-0126.html - http://secunia.com/advisories/61058 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:203 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/advisories/62030 - https://s
ame=MDVSA-2014:203 - http://marc.info/?l=bugtraq&m=142118135300698&w=2 - http://secunia.com/advisories/62030 - https://support.citrix.com/article/CTX216642 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://secunia.com/advisories/61819 - http://www-01.ibm.com/support/docview.wss?uid=swg21686997 - http://rhn.redhat.com/errata/RHSA-2014-1692.html
CVE ID: CVE-2014-3568 State: PUBLISHED Published: 2014-10-19T01:00:00 Last Updated: 2024-08-06T10:50:17.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142103967620673&w=2 - http://marc.info/?l=bugtraq&m=142804214608580&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html - http://marc.info/?l=bugtraq&m=14
8580&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html - http://marc.info/?l=bugtraq&m=141477196830952&w=2 - http://secunia.com/advisories/61130 - https://www.openssl.org/news/secadv_20141015.txt - http://secunia.com/advisories/62070 - http://www.securityfocus.com/bid/70585 - http://secunia.com/advisories/61073 - http://marc.info/?l=bugtraq&m=142791032306609&w=2 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=26a59d9b46574e457870197dffa802871b4c8fc7 - http://security.gentoo.org/glsa/glsa-201412-39.xml - http://www.debian.org/security/2014/dsa-3053 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - http://
urity/2014/dsa-3053 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - http://marc.info/?l=bugtraq&m=142495837901899&w=2 - https://support.apple.com/HT205217 - http://marc.info/?l=bugtraq&m=142103967620673&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97037 - f
//kc.mcafee.com/corporate/index?page=content&id=SB10091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/97037 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc - http://support.apple.com/HT204244 - http://marc.info/?l=bugtraq&m=141477196830952&w=2 - http://secunia.com/advisories/61207 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - http://secunia.com/advisories/62124 - http://secunia.com/advisories/59627 - http://marc.info/?l=bugtraq&m=142495837901899&w=2 - http://marc.info/?l=bugtraq&m=143290437727362&w=2 - http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html - http://secunia.com/advisories/61959 - htt
- http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html - http://secunia.com/advisories/61959 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6 - http://marc.info/?l=bugtraq&m=142624590206005&w=2 - http://marc.info/?l=bugtraq&m=143290522027658&w=2 - http://secunia.com/advisories/61058 - http://secunia.com/advisories/62030 - https://support.citrix.com/article/CTX216642 - http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html - http://www.securitytracker.com/id/1031053 - http://secunia.com/advisories/61819 - http://www-01.ibm.com/support/docview.wss?uid=swg21686997
CVE ID: CVE-2014-3569 State: PUBLISHED Published: 2014-12-24T11:00:00 Last Updated: 2024-08-06T10:50:17.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
ter the CVE-2014-3568 fix. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/71934 - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl - http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3569.html - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://security-tracker.de
com/HT204659 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://security-tracker.debian.org/tracker/CVE-2014-3569 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - http://www.securitytracker.com/id/1033378 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://www.openssl.org/news/secadv_20150108.txt - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://www.ma
_20150108.txt - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=b82924741b4bd590da890619be671f4635e46c2b - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10108 - https://git.
/security-announce/2015/Apr/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10108 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=6ce9687b5aba5391fc0de50e18779eb676d0e04d - https://kc.mcafee.com/corporate/index?page=content&id=SB10102 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://marc.info/?l=bugtraq&m=144050205101530&w=2 - http://marc.info/?l=bugtraq&m=142496179803395&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - https://support.citrix.com/article/CTX216642
395&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - https://support.citrix.com/article/CTX216642 - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - http://rt.openssl.org/Ticket/Display.html?id=3571&user=guest&pass=guest - https://bto.bluecoat.com/security-advisory/sa88 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=392fa7a952e97d82eac6958c81ed1e256e6b8ca5 - http://www.debian.org/security/2015/dsa-3125
CVE ID: CVE-2014-3570 State: PUBLISHED Published: 2015-01-09T02:00:00 Last Updated: 2024-08-06T10:50:17.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.oracle.com/technetwork/topics/security/cpuj
References: - http://marc.info/?l=bugtraq&m=142895206924048&w=2 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl - http://marc.info/?l=bugtraq&m=142720981827617&w=2 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://support.apple.com/HT204659 - https://github.com/openssl/openssl/commit/a7a44ba55cb4f884c6bc9ceac90072dea38e66d0 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://m
-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://rhn.redhat.com/errata/RHSA-2015-0849.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html - http://www.securitytracker.com/id/1033378 - http://marc.info/?l=bugtraq&m=142721102728110&w=2 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://www.openssl.org/news/secadv_20150108.txt - http://www.mandriva.com/security/advisories?name=MDVSA-2015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.securityfocus.com/bid/7
015:019 - http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html - http://www.securityfocus.com/bid/71939 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - http://rhn.redhat.com/errata/RHSA-2015-0066.html - http://marc.info/?l=bugtraq&m=142496289803847&w=2 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10108 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://kc.mcafee.com/corporate/i
SB10108 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10102 - http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://rhn.redhat.com/errata/RHSA-2016-1650.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://marc.info/?l=bugtraq&m=144050205101530&w=2 - http://marc.info/?l=bugtraq&m=142496179803395&w=2 - http://marc.info/?l=bugtraq&m=142720981827617&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - https://support.citrix.com/article/CTX216642 - http://marc.info/?l