CVE-2014-3508 - CVSS 4.3
Description
The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\0' characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.
CVSS scores for CVE-2014-3508
| Access Vector | Network |
| Access Complexity | Medium |
| Authentication | None |
| Confidentiality Impact | Partial |
| Integrity Impact | None |
| Availability Impact | None |
Threat Intelligence
- Has Public Exploit: No
- CISA KEV Release Date: N/A
- CISA KEV Due Date: N/A
- CISA KEV Required Action: N/A
Exploit Prediction in the next 30 days
Likely Exploited Vulnerabilities Probability
Common Weakness Enumeration for CVE-2014-3508
CWE-200 : Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Products affected by CVE-2014-3508
Any of the following configurations:
openssl
cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*
OR
openssl
cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*