ByteOS Network

CVE Vulnerability Details :

CVE-2013-4353

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-09 Jan, 2014 | 01:00

Updated At-06 Aug, 2024 | 16:38

▼CVE Numbering Authority (CNA)

The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.splunk.com/view/SP-CAAAMB3	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2837	vendor-advisory x_refsource_DEBIAN
http://www-01.ibm.com/support/docview.wss?uid=isg400001843	x_refsource_CONFIRM
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=blob_plain%3Bf=CHANGES%3Bhb=refs/heads/OpenSSL_1_0_1-stable	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html	vendor-advisory x_refsource_FEDORA
http://www-01.ibm.com/support/docview.wss?uid=isg400001841	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2079-1	vendor-advisory x_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0015.html	vendor-advisory x_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html	vendor-advisory x_refsource_SUSE
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=197e0ea817ad64820789d86711d55ff50d71f631	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html	vendor-advisory x_refsource_FEDORA
https://bugzilla.redhat.com/show_bug.cgi?id=1049058	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2014-0041.html	vendor-advisory x_refsource_REDHAT
http://www.openssl.org/news/vulnerabilities.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html	vendor-advisory x_refsource_SUSE

Hyperlink: http://www.splunk.com/view/SP-CAAAMB3

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2014/dsa-2837

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=isg400001843

Resource:

x_refsource_CONFIRM

Hyperlink: http://git.openssl.org/gitweb/?p=openssl.git%3Ba=blob_plain%3Bf=CHANGES%3Bhb=refs/heads/OpenSSL_1_0_1-stable

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=isg400001841

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2079-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://rhn.redhat.com/errata/RHSA-2014-0015.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=197e0ea817ad64820789d86711d55ff50d71f631

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1049058

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2014-0041.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.openssl.org/news/vulnerabilities.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.splunk.com/view/SP-CAAAMB3	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2014/dsa-2837	vendor-advisory x_refsource_DEBIAN x_transferred
http://www-01.ibm.com/support/docview.wss?uid=isg400001843	x_refsource_CONFIRM x_transferred
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=blob_plain%3Bf=CHANGES%3Bhb=refs/heads/OpenSSL_1_0_1-stable	x_refsource_CONFIRM x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www-01.ibm.com/support/docview.wss?uid=isg400001841	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2079-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://rhn.redhat.com/errata/RHSA-2014-0015.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.opensuse.org/opensuse-updates/2014-01/msg00070.html	vendor-advisory x_refsource_SUSE x_transferred
http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=197e0ea817ad64820789d86711d55ff50d71f631	x_refsource_CONFIRM x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html	vendor-advisory x_refsource_FEDORA x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1049058	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2014-0041.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.openssl.org/news/vulnerabilities.html	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-updates/2014-01/msg00067.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-updates/2014-01/msg00065.html	vendor-advisory x_refsource_SUSE x_transferred