CVE-2014-3511

Description

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a "protocol downgrade" issue.

4.3

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 7.70% Top 10%

Vendor Advisory opensuse.org Vendor Advisory marc.info Vendor Advisory redhat.com Vendor Advisory marc.info Vendor Advisory marc.info Vendor Advisory gentoo.org Vendor Advisory marc.info Vendor Advisory fedoraproject.org Vendor Advisory netbsd.org Vendor Advisory freebsd.org Vendor Advisory debian.org Vendor Advisory marc.info Vendor Advisory fedoraproject.org Vendor Advisory marc.info Vendor Advisory marc.info Vendor Advisory redhat.com Vendor Advisory openssl.org

Affected: n/a n/a

References

Link	Tags
http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html	vendor advisory
http://linux.oracle.com/errata/ELSA-2014-1052.html
http://secunia.com/advisories/60221	third party advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21682293
http://secunia.com/advisories/61184	third party advisory
http://marc.info/?l=bugtraq&m=142660345230545&w=2	vendor advisory
http://secunia.com/advisories/60022	third party advisory
https://www.openssl.org/news/secadv_20140806.txt	vendor advisory
http://secunia.com/advisories/61017	third party advisory
http://rhn.redhat.com/errata/RHSA-2015-0197.html	vendor advisory
http://secunia.com/advisories/60377	third party advisory
http://marc.info/?l=bugtraq&m=142350350616251&w=2	vendor advisory
http://secunia.com/advisories/59887	third party advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21683389
http://marc.info/?l=bugtraq&m=142791032306609&w=2	vendor advisory
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm
http://secunia.com/advisories/60890	third party advisory
http://security.gentoo.org/glsa/glsa-201412-39.xml	vendor advisory
http://support.f5.com/kb/en-us/solutions/public/15000/500/sol15564.html
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
http://marc.info/?l=bugtraq&m=142495837901899&w=2	vendor advisory
http://secunia.com/advisories/60803	third party advisory
http://secunia.com/advisories/59700	third party advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html	vendor advisory
http://www.securitytracker.com/id/1030693	vdb entry
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
https://exchange.xforce.ibmcloud.com/vulnerabilities/95162	vdb entry
http://www.splunk.com/view/SP-CAAANHS
http://secunia.com/advisories/60917	third party advisory
http://www.tenable.com/security/tns-2014-06
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc	vendor advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10084
http://secunia.com/advisories/60493	third party advisory
http://secunia.com/advisories/59710	third party advisory
http://secunia.com/advisories/60921	third party advisory
http://www.securityfocus.com/bid/69079	vdb entry
http://secunia.com/advisories/61043	third party advisory
http://secunia.com/advisories/60810	third party advisory
https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=280b1f1ad12131defcd986676a8fc9717aaa601b
http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240
http://secunia.com/advisories/61100	third party advisory
https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc	vendor advisory
http://secunia.com/advisories/61775	third party advisory
http://www.debian.org/security/2014/dsa-2998	vendor advisory
http://marc.info/?l=bugtraq&m=143290437727362&w=2	vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html	vendor advisory
http://secunia.com/advisories/61959	third party advisory
http://secunia.com/advisories/59756	third party advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1127504
http://marc.info/?l=bugtraq&m=142624590206005&w=2	vendor advisory
http://marc.info/?l=bugtraq&m=143290522027658&w=2	vendor advisory
http://rhn.redhat.com/errata/RHSA-2015-0126.html	vendor advisory
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc
http://secunia.com/advisories/58962	third party advisory
http://www.arubanetworks.com/support/alerts/aid-08182014.txt
http://secunia.com/advisories/60938	third party advisory
http://secunia.com/advisories/60684	third party advisory
https://support.citrix.com/article/CTX216642
https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html	mailing list
https://techzone.ergon.ch/CVE-2014-3511
http://www-01.ibm.com/support/docview.wss?uid=swg21686997
http://secunia.com/advisories/61139	third party advisory

Frequently Asked Questions

What is the severity of CVE-2014-3511?: CVE-2014-3511 has been scored as a medium severity vulnerability.
How to fix CVE-2014-3511?: To fix CVE-2014-3511, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2014-3511 being actively exploited in the wild?: It is possible that CVE-2014-3511 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~8% probability that this vulnerability will be exploited by malicious actors in the next 30 days.