CVE-2014-2970

openssl: client-crash when parsing SRP parameters (VU#904060)

View on CVE.org
Published Jul 31, 2014 CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed
Description
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5139. Reason: This candidate is a duplicate of CVE-2014-5139, and has also been used to refer to an unrelated topic that is currently outside the scope of CVE. This unrelated topic is a LibreSSL code change adding functionality for certain process-bifurcation use cases that might arise in future LibreSSL-based applications. There is no CVE ID associated with this LibreSSL code change. As of 20140730, CVE-2014-5139 is an undisclosed vulnerability in a different product, with ongoing vulnerability coordination that had previously used the CVE-2014-2970 ID

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Subscriptions

No data.

Weaknesses

Sources

Status
REJECTED
Assigner
certcc
Published
Updated
Jul 31, 2014, 1:57 AM
Reserved
Apr 21, 2014, 12:00 AM

View source JSON

No data.

Status
Rejected
Published
Jul 31, 2014, 5:06 AM
Modified
Nov 7, 2023, 2:19 AM

View source JSON

Severity
Moderate
Public date
Aug 6, 2014, 12:00 AM

View source Bugzilla JSON

No data.