CVE-2014-0195 : The dtls1_reassemble_fragment function in d1

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.

Published 2014-06-05 21:55:06

Updated 2022-06-30 19:49:04

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Products affected by CVE-2014-0195

Openssl » Openssl
Versions from including (>=) 1.0.1 and before (<) 1.0.1h
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl
Versions from including (>=) 1.0.0 and before (<) 1.0.0m
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl
Versions from including (>=) 0.9.8 and before (<) 0.9.8za
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 19
cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 20
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 42.1
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Matching versions
Mariadb » Mariadb
Versions from including (>=) 10.0.0 and before (<) 10.0.13
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2014-0195

Top countries where our scanners detected CVE-2014-0195

Top open port discovered on systems with this issue 53

IPs affected by CVE-2014-0195 55,302

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2014-0195!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2014-0195

EPSS FAQ

95.85%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 100 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2014-0195

OpenSSL DTLS Fragment Buffer Overflow DoS

Disclosure Date: 2014-06-05

First seen: 2020-04-26

auxiliary/dos/ssl/dtls_fragment_overflow

This module performs a Denial of Service Attack against Datagram TLS in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h. This occurs when a DTLS ClientHello message has multiple fragments and the fragment lengths of later fragments are larger tha

More information

CVSS scores for CVE-2014-0195

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2014-0195

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2014-0195

http://www-01.ibm.com/support/docview.wss?uid=swg21676071

IBM Security Bulletin: IBM Tivoli Network Manager IP Edition V39 Fix Pack 4 HTTPS support for Perl Collector install is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221
Third Party Advisory

CVEs referencing this url
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59192

Sign in
Not Applicable

CVEs referencing this url
http://secunia.com/advisories/59175

Sign in
Not Applicable

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html

[SECURITY] Fedora 20 Update: openssl-1.0.1e-39.fc20
Mailing List;Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140904544427729&w=2

'[security bulletin] HPSBMU03076 rev.2 - HP Systems Insight Manager (SIM) on Linux and Windows runnin' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://support.citrix.com/article/CTX140876

Citrix Security Advisory for OpenSSL Vulnerabilities (June 2014)
Third Party Advisory

CVEs referencing this url
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755

IBM Security Bulletin: IBM BladeCenter Advanced Management Module is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, and C
Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140389355508263&w=2

'[security bulletin] HPSBMU03056 rev.1 - HP Version Control Repository Manager (HP VCRM) running Open' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756

IBM Security Bulletin: IBM Upward Integration Modules (UIM) is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-34
Third Party Advisory

CVEs referencing this url
http://www.vmware.com/security/advisories/VMSA-2014-0012.html

VMSA-2014-0012.1
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/67900

OpenSSL CVE-2014-0195 Memory Corruption Vulnerability
Third Party Advisory;VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21675821

IBM Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195 and CV
Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140752315422991&w=2

'[security bulletin] HPSBMU03062 rev.1 - HP Insight Control server deployment on Linux and Windows ru' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

[security-announce] openSUSE-SU-2016:0640-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Oracle Critical Patch Update - July 2014
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/58714

Sign in
Not Applicable

CVEs referencing this url
http://www.vmware.com/security/advisories/VMSA-2014-0006.html

VMSA-2014-0006.11
Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21676035

IBM notice: The page you requested cannot be displayed
Broken Link

CVEs referencing this url
http://secunia.com/advisories/59429

Sign in
Not Applicable

CVEs referencing this url
http://support.apple.com/kb/HT6443

About the security content of OS X Mavericks v10.9.5 and Security Update 2014-004 - Apple Support
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/58977

Sign in
Not Applicable

CVEs referencing this url
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754

IBM Security Bulletin: IBM FastSetup is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470
Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=isg400001841

IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.4 Interim Fix 13 README Tivoli Composite Application Manager for Transactions 7.4.0.0 7.4.0.0-TIV-CAMIS-IF0013 R
Third Party Advisory

CVEs referencing this url
http://security.gentoo.org/glsa/glsa-201407-05.xml

OpenSSL: Multiple vulnerabilities (GLSA 201407-05) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://www.novell.com/support/kb/doc.php?id=7015271

Novell Messenger 2.2 and OpenSSL security vulnerability
Third Party Advisory

CVEs referencing this url
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Once-Bled-Twice-Shy-OpenSSL-CVE-2014-0195/ba-p/6501048

HPPSocialUserSignonPage - Hewlett Packard Enterprise Community
Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21677828

IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning.
Third Party Advisory

CVEs referencing this url
https://kc.mcafee.com/corporate/index?page=content&id=SB10075

McAfee Security Bulletin – Seven OpenSSL vulnerabilities patched in McAfee products
Broken Link

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140317760000786&w=2

'[security bulletin] HPSBOV03047 rev.1 - HP OpenVMS running OpenSSL, Remote Denial of Service (DoS), ' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www.openssl.org/news/secadv_20140605.txt

Vendor Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Oracle Critical Patch Update - October 2014
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1103598

1103598 – (CVE-2014-0195) CVE-2014-0195 openssl: Buffer overflow via DTLS invalid fragment
Issue Tracking;Patch;Third Party Advisory
http://secunia.com/advisories/58945

Sign in
Not Applicable

CVEs referencing this url
http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15356.html

Third Party Advisory
http://secunia.com/advisories/58615

Sign in
Not Applicable

CVEs referencing this url
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm

Huawei-SA-20140613-OpenSSL
Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140431828824371&w=2

'[security bulletin] HPSBMU03055 rev.1 - HP Smart Update Manager (HP SUM) running OpenSSL, Remote Den' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www.ibm.com/support/docview.wss?uid=swg24037783

IBM SDK for Node.js 1.1.0.4 for use by the Cordova tools
Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140389274407904&w=2

'[security bulletin] HPSBMU03057 rev.1 - HP Version Control Agent (HP VCA) running OpenSSL on Linux a' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21673137

IBM notice: The page you requested cannot be displayed
Broken Link

CVEs referencing this url
http://secunia.com/advisories/58713

Sign in
Not Applicable

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html

[security-announce] SUSE-SU-2015:0743-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140448122410568&w=2

'[security bulletin] HPSBMU03051 rev.2 - HP System Management Homepage running OpenSSL on Linux and W' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59437

Sign in
Not Applicable

CVEs referencing this url
http://secunia.com/advisories/59040

Sign in
Not Applicable

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21676889

IBM notice: The page you requested cannot be displayed
Broken Link

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946

HPSBST03642 rev.3 - HPE StoreVirtual Products running LeftHand OS using OpenSSL and OpenSSH, Remote Arbitrary Code Execution, Denial of Service (DoS), Disclosure of Sensitive Information, Unauthorized
Third Party Advisory

CVEs referencing this url
http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-14-173-CVE-2014-0195-OpenSSL-DTLS-Fragment-Out-of-Bounds/ba-p/6501002

HPPSocialUserSignonPage - Hewlett Packard Enterprise Community
Broken Link
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Oracle Critical Patch Update - October 2017
Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21676419

IBM Security Bulletin: Tivoli Management Framework is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470 and po
Third Party Advisory

CVEs referencing this url
http://seclists.org/fulldisclosure/2014/Dec/23

Full Disclosure: NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
Mailing List;Third Party Advisory

CVEs referencing this url
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757

IBM Security Bulletin: IBM ToolsCenter (including ToolsCenter Suite, ASU, DSA, and USXPi) is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-01
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59365

Sign in
Not Applicable

CVEs referencing this url
http://secunia.com/advisories/59518

Sign in
Not Applicable

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Oracle Critical Patch Update - January 2015
Third Party Advisory

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html

[SECURITY] Fedora 19 Update: openssl-1.0.1e-39.fc19
Mailing List;Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59364

Sign in
Not Applicable

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140491231331543&w=2

'[security bulletin] HPSBMU03065 rev.1 - HP Operations Analytics, OpenSSL Vulnerability, SSL/TLS, Rem' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www.fortiguard.com/advisory/FG-IR-14-018/

FortiGuard
Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21678289

IBM Security Bulletin: Tivoli Workload Scheduler is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-3470
Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140266410314613&w=2

'[security bulletin] HPSBUX03046 SSRT101590 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21683332

IBM Security Bulletin: IBM InfoSphere Guardium Database Activity Monitor is affected by CVE-2014-0221, CVE-2014-0224, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59449

Sign in
Not Applicable

CVEs referencing this url
http://secunia.com/advisories/59441

Sign in
Not Applicable

CVEs referencing this url
http://secunia.com/advisories/58337

Sign in
Not Applicable

CVEs referencing this url
http://secunia.com/advisories/59310

Sign in
Not Applicable

CVEs referencing this url
http://secunia.com/advisories/59188

Sign in
Not Applicable

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21677695

IBM Security Bulletin: IBM Initiate Master Data Service, IBM InfoSphere Master Data Management are affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/archive/1/534161/100/0/threaded

SecurityFocus
Third Party Advisory;VDB Entry

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21676644

IBM Security Bulletin: IBM MessageSight is affected by the following OpenSSL vulnerabilities: (CVE-2014-0224, and CVE-2014-0195)
Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1030337

OpenSSL DTLS Processing Bugs Let Remote Users Deny Service and Execute Arbitrary Code - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=isg400001843

IBM Tivoli Composite Application Manager for Transactions Internet Service Monitoring 7.3.0.1 Interim Fix 29 README Tivoli Composite Application Manager for Transactions 7.3.0.1 7.3.0.1-TIV-CAMIS-IF00
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59223

Sign in
Not Applicable

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163

IBM Security Bulletin: IBM i is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198 and CVE-2014-3470
Third Party Advisory

CVEs referencing this url
http://www.blackberry.com/btsc/KB36051

Third Party Advisory

CVEs referencing this url
http://www.ibm.com/support/docview.wss?uid=swg21676793

IBM notice: The page you requested cannot be displayed
Broken Link

CVEs referencing this url
http://www.f-secure.com/en/web/labs_global/fsc-2014-6

FSC-2014-6 | F-Secure
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59306

Sign in
Not Applicable

CVEs referencing this url
https://kb.bluecoat.com/index?page=content&id=SA80

Broken Link

CVEs referencing this url
http://secunia.com/advisories/59305

Sign in
Not Applicable

CVEs referencing this url
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629

Juniper Networks - 2014-06 Out of Cycle Security Bulletin: Vulnerabilities in OpenSSL related to ChangeCipherSpec, DTLS, SSL_MODE_RELEASE_BUFFERS and ECDH ciphersuites
Third Party Advisory

CVEs referencing this url
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc

Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140621259019789&w=2

'[security bulletin] HPSBMU03074 rev.1 - HP Insight Control server migration on Linux and Windows run' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www.ibm.com/support/docview.wss?uid=swg21676356

IBM Security Bulletin: Rational Application Developer is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470
Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21678167

IBM Security Bulletin: IBM® SDK for Node.js™ is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470
Third Party Advisory

CVEs referencing this url
http://www.mandriva.com/security/advisories?name=MDVSA-2015:062

mandriva.com
Broken Link

CVEs referencing this url
http://secunia.com/advisories/59454

Sign in
Not Applicable

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21676062

IBM Security Bulletin: SmartCloud Orchestrator is affected by the following OpenSSL vulnerabilities (CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470, CVE-2014-
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/61254

Sign in
Not Applicable

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140482916501310&w=2

'[security bulletin] HPSBGN03050 rev.1 - HP IceWall SSO Dfw and HP IceWall MCRP running OpenSSL, Remo' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21677527

IBM notice: The page you requested cannot be displayed
Broken Link

CVEs referencing this url
http://www.mandriva.com/security/advisories?name=MDVSA-2014:106

mandriva.com
Broken Link

CVEs referencing this url
http://marc.info/?l=bugtraq&m=142660345230545&w=2

'[security bulletin] HPSBHF03293 rev.1 - HP Virtual Connect 8Gb 24-Port FC Module running OpenSSL and' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/59287

Sign in
Not Applicable

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21676879

IBM notice: The page you requested cannot be displayed
Broken Link

CVEs referencing this url
http://secunia.com/advisories/59189

Sign in
Not Applicable

CVEs referencing this url
http://marc.info/?l=bugtraq&m=140499827729550&w=2

'[security bulletin] HPSBMU03069 rev.1 - HP Software Operation Orchestration, OpenSSL Vulnerability, ' - MARC
Issue Tracking;Mailing List;Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/58660

Sign in
Not Applicable

CVEs referencing this url
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=1632ef744872edc2aa2a53d487d3e79c965a4ad3

git.openssl.org Git - openssl.git/commit
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2014-0195