CVE-2014-0198
MEDIUM · CVSS 4.3EPSS 40.3%EU EUVD
The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.
Key facts
- CVSS score
- 4.3 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:M/Au:N/C:N/I:N/A:P- Weakness (CWE)
- CWE-476
- EPSS score
- 40.3% (99th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2014-0249)
- Published
- May 6, 2014
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2014-0249 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- debian / debian linux
- debian / debian linux
- debian / debian linux
- fedoraproject / fedora
- fedoraproject / fedora
- mariadb / mariadb
- openssl / openssl
- opensuse / opensuse
- opensuse / opensuse
- suse / linux enterprise desktop
- suse / linux enterprise server
- suse / linux enterprise software development kit
- suse / linux enterprise workstation extension
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- SUSE Linux Enterprise Server Version 12 - SUSE LLC - Common Criteria BSI-DSZ-CC-0962-2016 - archived
References
- http://advisories.mageia.org/MGASA-2014-0204.html(Third Party Advisory)
- http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc(Third Party Advisory)
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629(Third Party Advisory)
- http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195(Third Party Advisory)
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html(Mailing List, Third Party Advisory)
- http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html(Mailing List, Third Party Advisory)
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html(Mailing List, Third Party Advisory)
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00036.html(Mailing List, Third Party Advisory)
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00037.html(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140389274407904&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140389355508263&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140431828824371&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140448122410568&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140544599631400&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140621259019789&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140752315422991&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=140904544427729&w=2(Mailing List, Third Party Advisory)
- http://marc.info/?l=bugtraq&m=141658880509699&w=2(Mailing List, Third Party Advisory)
- http://puppetlabs.com/security/cve/cve-2014-0198(Third Party Advisory)
- http://seclists.org/fulldisclosure/2014/Dec/23(Mailing List, Third Party Advisory)
- http://secunia.com/advisories/58337(Not Applicable)
- http://secunia.com/advisories/58667(Not Applicable)
- http://secunia.com/advisories/58713(Not Applicable)
- http://secunia.com/advisories/58714(Not Applicable)
- http://secunia.com/advisories/58939(Not Applicable)
- http://secunia.com/advisories/58945(Not Applicable)
- http://secunia.com/advisories/58977(Not Applicable)
- http://secunia.com/advisories/59126(Not Applicable)
- http://secunia.com/advisories/59162(Not Applicable)
- http://secunia.com/advisories/59163(Not Applicable)
- http://secunia.com/advisories/59190(Not Applicable)
- http://secunia.com/advisories/59202(Not Applicable)
- http://secunia.com/advisories/59264(Not Applicable)
- http://secunia.com/advisories/59282(Not Applicable)
- http://secunia.com/advisories/59284(Not Applicable)
- http://secunia.com/advisories/59287(Not Applicable)
- http://secunia.com/advisories/59300(Not Applicable)
- http://secunia.com/advisories/59301(Not Applicable)
- http://secunia.com/advisories/59306(Not Applicable)
- http://secunia.com/advisories/59310(Not Applicable)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain