CVE-2014-3470 in Apple Mac OS X

요약 (영어)

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

예약하다

2014. 05. 14.

공개

2014. 06. 05.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
67659	Apple Mac OS X OpenSSL s3_clnt.c ssl3_send_client_key_exchange 약한 암호화	310	정의되지 않음	공식 수정	CVE-2014-3470
13457	OpenSSL ECDH ssl3_read_bytes 약한 암호화	310	입증되지 않음	공식 수정	CVE-2014-3470