Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2014-3568

OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.

  • Published: Oct 19, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-3568
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
openssl / openssl 1.0.0n 1.0.0n.x
openssl / openssl 1.0.1-beta2 1.0.1-beta2.x
openssl / openssl 1.0.0c 1.0.0c.x
openssl / openssl 1.0.0i 1.0.0i.x
openssl / openssl 1.0.0-beta1 1.0.0-beta1.x
openssl / openssl 1.0.1h 1.0.1h.x
openssl / openssl 1.0.0-beta2 1.0.0-beta2.x
openssl / openssl 1.0.0m 1.0.0m.x
openssl / openssl 1.0.1c 1.0.1c.x
openssl / openssl 1.0.1g 1.0.1g.x
openssl / openssl 1.0.0h 1.0.0h.x
openssl / openssl 1.0.0-beta3 1.0.0-beta3.x
openssl / openssl 1.0.0e 1.0.0e.x
openssl / openssl 1.0.1-beta3 1.0.1-beta3.x
openssl / openssl 1.0.0f 1.0.0f.x
openssl / openssl 1.0.0d 1.0.0d.x
openssl / openssl 1.0.0j 1.0.0j.x
openssl / openssl 1.0.1a 1.0.1a.x
openssl / openssl 1.0.1-beta1 1.0.1-beta1.x
openssl / openssl 1.0.1d 1.0.1d.x
openssl / openssl 1.0.0k 1.0.0k.x
openssl / openssl 1.0.0-beta4 1.0.0-beta4.x
openssl / openssl 1.0.0 1.0.0.x
openssl / openssl - 0.9.8zb.x
openssl / openssl 1.0.1b 1.0.1b.x
openssl / openssl 1.0.1e 1.0.1e.x
openssl / openssl 1.0.0-beta5 1.0.0-beta5.x
openssl / openssl 1.0.1f 1.0.1f.x
openssl / openssl 1.0.0l 1.0.0l.x
openssl / openssl 1.0.0a 1.0.0a.x
openssl / openssl 1.0.1i 1.0.1i.x
openssl / openssl 1.0.0b 1.0.0b.x
openssl / openssl 1.0.1 1.0.1.x
openssl / openssl 1.0.0g 1.0.0g.x