NVD Vulnerability Detail

CVE-2014-3571

Summary	OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.
Publication Date	Jan. 9, 2015, 11:59 a.m.
Registration Date	Jan. 26, 2021, 3:10 p.m.
Last Update	Nov. 21, 2024, 11:08 a.m.

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0n:::::::*
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0o:::::::*
cpe:2.3:a:openssl:openssl::::::::		0.9.8zc
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
2	http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
3	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html
4	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html
5	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html
6	http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html
7	http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html
8	http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html
9	http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
10	http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
11	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
12	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
13	http://marc.info/?l=bugtraq&m=142496179803395&w=2
14	http://marc.info/?l=bugtraq&m=142496179803395&w=2
15	http://marc.info/?l=bugtraq&m=142496289803847&w=2
16	http://marc.info/?l=bugtraq&m=142496289803847&w=2
17	http://marc.info/?l=bugtraq&m=142496289803847&w=2
18	http://marc.info/?l=bugtraq&m=142496289803847&w=2
19	http://marc.info/?l=bugtraq&m=142721102728110&w=2
20	http://marc.info/?l=bugtraq&m=142721102728110&w=2
21	http://marc.info/?l=bugtraq&m=142895206924048&w=2
22	http://marc.info/?l=bugtraq&m=142895206924048&w=2
23	http://marc.info/?l=bugtraq&m=143748090628601&w=2
24	http://marc.info/?l=bugtraq&m=143748090628601&w=2
25	http://marc.info/?l=bugtraq&m=144050155601375&w=2
26	http://marc.info/?l=bugtraq&m=144050155601375&w=2
27	http://marc.info/?l=bugtraq&m=144050205101530&w=2
28	http://marc.info/?l=bugtraq&m=144050205101530&w=2
29	http://marc.info/?l=bugtraq&m=144050254401665&w=2
30	http://marc.info/?l=bugtraq&m=144050254401665&w=2
31	http://marc.info/?l=bugtraq&m=144050297101809&w=2
32	http://marc.info/?l=bugtraq&m=144050297101809&w=2
33	http://rhn.redhat.com/errata/RHSA-2015-0066.html
34	http://rhn.redhat.com/errata/RHSA-2015-0066.html
35	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl
36	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl
37	http://www.debian.org/security/2015/dsa-3125
38	http://www.debian.org/security/2015/dsa-3125
39	http://www.mandriva.com/security/advisories?name=MDVSA-2015:019
40	http://www.mandriva.com/security/advisories?name=MDVSA-2015:019
41	http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
42	http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
43	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
44	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
45	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
46	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
47	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
48	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
49	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
50	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
51	http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
52	http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
53	http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
54	http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
55	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
56	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
57	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
58	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
59	http://www.securityfocus.com/bid/71937
60	http://www.securityfocus.com/bid/71937
61	http://www.securitytracker.com/id/1033378
62	http://www.securitytracker.com/id/1033378
63	https://bto.bluecoat.com/security-advisory/sa88
64	https://bto.bluecoat.com/security-advisory/sa88
65	https://github.com/openssl/openssl/commit/248385c606620b29ecc96ca9d3603463f879652b
66	https://github.com/openssl/openssl/commit/248385c606620b29ecc96ca9d3603463f879652b
67	https://github.com/openssl/openssl/commit/feba02f3919495e1b960c33ba849e10e77d0785d
68	https://github.com/openssl/openssl/commit/feba02f3919495e1b960c33ba849e10e77d0785d
69	https://kc.mcafee.com/corporate/index?page=content&id=SB10102
70	https://kc.mcafee.com/corporate/index?page=content&id=SB10102
71	https://kc.mcafee.com/corporate/index?page=content&id=SB10108
72	https://kc.mcafee.com/corporate/index?page=content&id=SB10108
73	https://support.apple.com/HT204659
74	https://support.apple.com/HT204659
75	https://www.openssl.org/news/secadv_20150108.txt	Vendor Advisory
76	https://www.openssl.org/news/secadv_20150108.txt	Vendor Advisory

Common Vulnerabilities List

JVN Vulnerability Information

OpenSSL におけるサービス運用妨害 (DoS) の脆弱性

Title	OpenSSL におけるサービス運用妨害 (DoS) の脆弱性
Summary	OpenSSL には、d1_pkt.c の dtls1_get_record 関数および s3_pkt.c の ssl3_read_n 関数に関する処理に不備があるため、サービス運用妨害 (NULL ポインタデリファレンスおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-476: NULL Pointer Dereference (NULL ポインタデリファレンス) と識別されています。 http://cwe.mitre.org/data/definitions/476.html
Possible impacts	第三者により、ハンドシェイクボディとは異なるハンドシェイクヘッダの読み込み操作処理を伴う巧妙に細工された DTLS メッセージを介して、サービス運用妨害 (NULL ポインタデリファレンスおよびアプリケーションクラッシュ) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 14, 2014, midnight
Registration Date	Jan. 13, 2015, 4:47 p.m.
Last Update	Nov. 22, 2016, 3:58 p.m.

Affected System

ヒューレット・パッカード

HP ThinPro Linux (ARM) 4.1

HP ThinPro Linux (ARM) 4.2

HP ThinPro Linux (ARM) 4.3

HP ThinPro Linux (ARM) 4.4

HP ThinPro Linux (x86) 4.1

HP ThinPro Linux (x86) 4.2

HP ThinPro Linux (x86) 4.3

HP ThinPro Linux (x86) 4.4

HP ThinPro Linux (x86) 5.0

HP ThinPro Linux (x86) 5.1

オラクル

Integrated Lights Out Manager (Sun System Firmware) 8.7.2.b 未満

Integrated Lights Out Manager (Sun System Firmware) 9.4.2e 未満

MySQL 5.6.22 およびそれ以前

Oracle Communications Core Session Manager 7.2.5

Oracle Communications Core Session Manager 7.3.5

Oracle Communications Policy Management 10.4.1

Oracle Communications Policy Management 12.1.1 およびそれ以前

Oracle Communications Policy Management 9.7.3

Oracle Communications Policy Management 9.9.1

Oracle Fusion Middleware の Oracle Exalogic Infrastructure 1.x

Oracle Fusion Middleware の Oracle Exalogic Infrastructure 2.x

Oracle Fusion Middleware の Oracle Mobile Security Suite MSS 3.0

Oracle Fusion Middleware の Oracle Tuxedo 12.1.1.0

Oracle HTTP Server 11.5.10.2

Oracle Solaris 11.2

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.1

Oracle Supply Chain Products Suite の Oracle Transportation Management 6.2

Oracle Virtualization の Oracle Secure Global Desktop 4.63

Oracle Virtualization の Oracle Secure Global Desktop 4.71

Oracle Virtualization の Oracle Secure Global Desktop 5.1

XCP 2260 未満 (Fujitsu M10-1/M10-4/M10-4S サーバ)

OpenSSL Project

OpenSSL 0.9.8zd 未満

OpenSSL 1.0.0p 未満の 1.0.0

OpenSSL 1.0.1k 未満の 1.0.1

アップル

Apple Mac OS X 10.10 から 10.10.2

Apple Mac OS X 10.8.5

Apple Mac OS X 10.9.5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-3571	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571
National Vulnerability Database (NVD)
2	CVE-2014-3571	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3571

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Apple Mailing Lists
1	APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004	http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
Apple Security Updates
2	HT204659	http://support.apple.com/en-us/HT204659
Apple セキュリティアップデート
3	HT204659	http://support.apple.com/ja-jp/HT204659
Cisco Security Advisory
4	cisco-sa-20150310-ssl	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl
GitHub
5	Fix crash in dtls1_get_record whilst in the listen state where you get two separate reads performed	https://github.com/openssl/openssl/commit/feba02f3919495e1b960c33ba849e10e77d0785d
6	Follow on from CVE-2014-3571. This fixes the code that was the original source of the crash due to p being NULL.	https://github.com/openssl/openssl/commit/248385c606620b29ecc96ca9d3603463f879652b
HP Security Bulletin
7	HPSBHF03289	http://marc.info/?l=bugtraq&m=142721102728110&w=2
8	HPSBUX03244 SSRT101885	http://h20565.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04556853&lang=en&cc=us
NEC製品セキュリティ情報
9	NV15-017	http://jpn.nec.com/security-info/secinfo/nv15-017.html
OpenSSL Security Advisory
10	DTLS segmentation fault in dtls1_get_record (CVE-2014-3571)	https://www.openssl.org/news/secadv_20150108.txt
Oracle Critical Patch Update
11	Oracle Critical Patch Update Advisory - April 2015	http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
12	Oracle Critical Patch Update Advisory - July 2015	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
13	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
14	Oracle Critical Patch Update Advisory - October 2015	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
15	Oracle Critical Patch Update Advisory - October 2016	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
16	Text Form of Oracle Critical Patch Update - April 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuapr2015verbose-2365613.html
17	Text Form of Oracle Critical Patch Update - July 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2015verbose-2367947.html
18	Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2016verbose-2881721.html
19	Text Form of Oracle Critical Patch Update - October 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuoct2015verbose-2367954.html
20	Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices	http://www.oracle.com/technetwork/security-advisory/cpuoct2016verbose-2881725.html
Oracle Technology Network
21	Oracle Third Party Bulletin - January 2015	http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
Red Hat Security Advisory
22	RHSA-2015:0066	https://rhn.redhat.com/errata/RHSA-2015-0066.html
SECURITY BLOG
23	April 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/april_2015_critical_patch_update
24	July 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2015_critical_patch_update
25	July 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2016_critical_patch_update
26	October 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2015_critical_patch_update
27	October 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2016_critical_patch_update
シスコセキュリティアドバイザリ
28	cisco-sa-20150310-ssl	http://www.cisco.com/cisco/web/support/JP/112/1128/1128755_cisco-sa-20150310-ssl-j.html
製品セキュリティ情報
29	TLSA-2015-2	http://www.turbolinux.co.jp/security/2015/TLSA-2015-2j.html
30	株式会社バッファローの告知ページ	http://buffalo.jp/support_s/s20150327b.html

その他

No	Name	URL
JVN
1	JVNVU#91828320	http://jvn.jp/vu/JVNVU91828320/index.html
2	JVNVU#98974537	https://jvn.jp/vu/JVNVU98974537/index.html

Change Log

No	Changed Details	Date of change
0	[2015年01月13日] 掲載 [2015年02月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Third Party Bulletin - January 2015) を追加 [2015年03月19日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：シスコシステムズ (cisco-sa-20150310-ssl) を追加ベンダ情報：ヒューレット・パッカード (HPSBUX03244 SSRT101885) を追加ベンダ情報：レッドハット (RHSA-2015:0066) を追加 [2015年03月26日] ベンダ情報：ターボリナックス (TLSA-2015-2) を追加 [2015年04月13日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT204659) を追加ベンダ情報：アップル (APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004) を追加参考情報：JVN (JVNVU#91828320) を追加 [2015年04月20日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - April 2015) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - April 2015 Risk Matrices) を追加ベンダ情報：オラクル (April 2015 Critical Patch Update Released) を追加 [2015年06月22日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：ヒューレット・パッカード (HPSBHF03289) を追加 [2015年06月26日] ベンダ情報：バッファロー (株式会社バッファローの告知ページ) を追加 [2015年07月29日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2015) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2015 Risk Matrices) を追加ベンダ情報：オラクル (July 2015 Critical Patch Update Released) を追加 [2015年10月22日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2015) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - October 2015 Risk Matrices) を追加ベンダ情報：オラクル (October 2015 Critical Patch Update Released) を追加 [2015年10月27日] ベンダ情報：日本電気 (NV15-017) を追加 [2016年07月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices) を追加ベンダ情報：オラクル (July 2016 Critical Patch Update Released) を追加 [2016年11月22日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices) を追加ベンダ情報：オラクル (October 2016 Critical Patch Update Released) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0n:::::::*
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0o:::::::*
cpe:2.3:a:openssl:openssl::::::::		0.9.8zc
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*