Description

Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.

Remediation

References

CVE-2014-3512

Related Vulnerabilities

Python Divide By Zero Vulnerability (CVE-2017-18207)

WordPress Plugin Advanced Custom Fields:reCAPTCHA Field Security Bypass (1.1.1)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33940)

WordPress Plugin Simple Feature Requests Free Unspecified Vulnerability (1.0.4)

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-16980)

Severity

High

Classification

CVE-2014-3512 CWE-119

Tags

Missing Update Known Vulnerabilities