| Max CVSS | 4.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | CVSS3 | Summary | Last (major) update | Published | |
|---|---|---|---|---|---|---|
| CVE-2014-3566 | 4.3 | 3.4 |
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
|
2021-08-31 - 15:44 | 2014-10-15 - 00:55 | |
| CVE-2014-5139 | 4.3 | None |
The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite
|
2017-01-07 - 03:00 | 2014-08-13 - 23:55 |