Oval Definition:oval:org.mitre.oval:def:25035
Revision Date:2014-08-11Version:15
Title:AIX OpenSSL SSL_MODE_RELEASE_BUFFERS NULL pointer dereference
Description:The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-0198
Platform(s):IBM AIX 6.1
IBM AIX 7.1
Product(s):
Definition Synopsis
  • platforms
  • IBM AIX 6.1 is installed
  • OR IBM AIX 7.1 is installed
  • AND File Version Exists
  • openssl.base greater than or equal 1.0.1.500
  • AND openssl.base less than or equal 1.0.1.510
  • BACK