CVE-2014-3512

原文の説明

Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.

影響を受けるソフトウェア

• OpenSSL = 1.0.1= 1.0.0d= 1.0.1h= 1.0.1c= 1.0.0b= 1.0.1g 完全一致

詳細

公開日

2014-08-13

最終更新

2026-06-17

CVSS ベクター

AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE

CWE-119

参考資料

• cve.org/CVE-2014-3512
• nvd.nist.gov/vuln/detail/CVE-2014-3512
• aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc
• lists.opensuse.org/opensuse-updates/2014-08/msg00036.html
• marc.info/?l=bugtraq&m=142660345230545&w=2
• secunia.com/advisories/59700
• secunia.com/advisories/59710
• secunia.com/advisories/59756
• secunia.com/advisories/60022
• secunia.com/advisories/60221
• secunia.com/advisories/60493
• secunia.com/advisories/60803
• secunia.com/advisories/60810