NVD脆弱性詳細

CVE-2014-0224

概要	OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
公表日	2014年6月6日6:55
登録日	2021年1月26日15:04
最終更新日	2024年11月21日11:01

CVSS3.1 : HIGH
スコア	7.4
ベクター	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	高
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	なし

CVSS2.0 : MEDIUM
スコア	5.8
ベクター	AV:N/AC:M/Au:N/C:P/I:P/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	なし
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:openssl:openssl::::::::	1.0.0			1.0.0m
cpe:2.3:a:openssl:openssl::::::::	1.0.1			1.0.1h
cpe:2.3:a:openssl:openssl::::::::				0.9.8za

構成2	以上	以下	より上	未満
cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
cpe:2.3:a:redhat:storage:2.1:::::::*
cpe:2.3:o:redhat:enterprise_linux:4:::::::*
cpe:2.3:o:redhat:enterprise_linux:5:::::::*
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.1:::::::*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:::::::*
cpe:2.3:o:fedoraproject:fedora:20:::::::*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.2.3:::::::*
cpe:2.3:o:fedoraproject:fedora:19:::::::*
cpe:2.3:o:opensuse:opensuse:13.1:::::::*
cpe:2.3:o:opensuse:opensuse:13.2:::::::*

構成3		以上	以下	より上	未満
cpe:2.3:a:filezilla-project:filezilla_server::::::::					0.9.45

構成4		以上	以下	より上	未満
cpe:2.3:o:siemens:application_processing_engine_firmware::::::::					2.0.2
実行環境
1	cpe:2.3:h:siemens:application_processing_engine:-:::::::*

構成5		以上	以下	より上	未満
cpe:2.3:o:siemens:cp1543-1_firmware::::::::					1.1.25
実行環境
1	cpe:2.3:h:siemens:cp1543-1:-:::::::*

構成6		以上	以下	より上	未満
cpe:2.3:o:siemens:s7-1500_firmware::::::::					1.6
実行環境
1	cpe:2.3:h:siemens:s7-1500:-:::::::*

構成7		以上	以下	より上	未満
cpe:2.3:o:siemens:rox_firmware::::::::					1.16.1
実行環境
1	cpe:2.3:h:siemens:rox:-:::::::*

構成8		以上	以下	より上	未満
cpe:2.3:a:mariadb:mariadb::::::::		10.0.0			10.0.13

構成9	以上	以下	より上	未満
cpe:2.3:a:python:python::::::::	3.4.0			3.4.2
cpe:2.3:a:python:python::::::::	2.7.0			2.7.8

構成10		以上	以下	より上	未満
cpe:2.3:a:nodejs:node.js::::::::					0.10.29

関連情報、対策とツール

No	URL	タグ
1	http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc	Third Party Advisory
2	http://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc	Third Party Advisory
3	http://ccsinjection.lepidum.co.jp	Third Party Advisory
4	http://ccsinjection.lepidum.co.jp	Third Party Advisory
5	http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html	Third Party Advisory
6	http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html	Third Party Advisory
7	http://esupport.trendmicro.com/solution/en-US/1103813.aspx	Third Party Advisory
8	http://esupport.trendmicro.com/solution/en-US/1103813.aspx	Third Party Advisory
9	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629	Not Applicable
10	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629	Not Applicable
11	http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195	Not Applicable
12	http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195	Not Applicable
13	http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217	Third Party Advisory
14	http://kb.juniper.net/InfoCenter/index?page=content&id=KB29217	Third Party Advisory
15	http://linux.oracle.com/errata/ELSA-2014-1053.html	Third Party Advisory
16	http://linux.oracle.com/errata/ELSA-2014-1053.html	Third Party Advisory
17	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html	Third Party Advisory
18	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html	Third Party Advisory
19	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html	Third Party Advisory
20	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html	Third Party Advisory
21	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html	Third Party Advisory
22	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html	Third Party Advisory
23	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html	Third Party Advisory
24	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html	Third Party Advisory
25	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html	Third Party Advisory
26	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html	Third Party Advisory
27	http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html	Third Party Advisory
28	http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html	Third Party Advisory
29	http://marc.info/?l=bugtraq&m=140266410314613&w=2	Third Party Advisory
30	http://marc.info/?l=bugtraq&m=140266410314613&w=2	Third Party Advisory
31	http://marc.info/?l=bugtraq&m=140266410314613&w=2	Third Party Advisory
32	http://marc.info/?l=bugtraq&m=140266410314613&w=2	Third Party Advisory
33	http://marc.info/?l=bugtraq&m=140317760000786&w=2	Third Party Advisory
34	http://marc.info/?l=bugtraq&m=140317760000786&w=2	Third Party Advisory
35	http://marc.info/?l=bugtraq&m=140369637402535&w=2	Third Party Advisory
36	http://marc.info/?l=bugtraq&m=140369637402535&w=2	Third Party Advisory
37	http://marc.info/?l=bugtraq&m=140386311427810&w=2	Third Party Advisory
38	http://marc.info/?l=bugtraq&m=140386311427810&w=2	Third Party Advisory
39	http://marc.info/?l=bugtraq&m=140389274407904&w=2	Third Party Advisory
40	http://marc.info/?l=bugtraq&m=140389274407904&w=2	Third Party Advisory
41	http://marc.info/?l=bugtraq&m=140389355508263&w=2	Third Party Advisory
42	http://marc.info/?l=bugtraq&m=140389355508263&w=2	Third Party Advisory
43	http://marc.info/?l=bugtraq&m=140431828824371&w=2	Third Party Advisory
44	http://marc.info/?l=bugtraq&m=140431828824371&w=2	Third Party Advisory
45	http://marc.info/?l=bugtraq&m=140448122410568&w=2	Third Party Advisory
46	http://marc.info/?l=bugtraq&m=140448122410568&w=2	Third Party Advisory
47	http://marc.info/?l=bugtraq&m=140482916501310&w=2	Third Party Advisory
48	http://marc.info/?l=bugtraq&m=140482916501310&w=2	Third Party Advisory
49	http://marc.info/?l=bugtraq&m=140491231331543&w=2	Third Party Advisory
50	http://marc.info/?l=bugtraq&m=140491231331543&w=2	Third Party Advisory
51	http://marc.info/?l=bugtraq&m=140499864129699&w=2	Third Party Advisory
52	http://marc.info/?l=bugtraq&m=140499864129699&w=2	Third Party Advisory
53	http://marc.info/?l=bugtraq&m=140544599631400&w=2	Third Party Advisory
54	http://marc.info/?l=bugtraq&m=140544599631400&w=2	Third Party Advisory
55	http://marc.info/?l=bugtraq&m=140604261522465&w=2	Third Party Advisory
56	http://marc.info/?l=bugtraq&m=140604261522465&w=2	Third Party Advisory
57	http://marc.info/?l=bugtraq&m=140621259019789&w=2	Third Party Advisory
58	http://marc.info/?l=bugtraq&m=140621259019789&w=2	Third Party Advisory
59	http://marc.info/?l=bugtraq&m=140672208601650&w=2	Third Party Advisory
60	http://marc.info/?l=bugtraq&m=140672208601650&w=2	Third Party Advisory
61	http://marc.info/?l=bugtraq&m=140752315422991&w=2	Third Party Advisory
62	http://marc.info/?l=bugtraq&m=140752315422991&w=2	Third Party Advisory
63	http://marc.info/?l=bugtraq&m=140784085708882&w=2	Third Party Advisory
64	http://marc.info/?l=bugtraq&m=140784085708882&w=2	Third Party Advisory
65	http://marc.info/?l=bugtraq&m=140794476212181&w=2	Third Party Advisory
66	http://marc.info/?l=bugtraq&m=140794476212181&w=2	Third Party Advisory
67	http://marc.info/?l=bugtraq&m=140852757108392&w=2	Third Party Advisory
68	http://marc.info/?l=bugtraq&m=140852757108392&w=2	Third Party Advisory
69	http://marc.info/?l=bugtraq&m=140852826008699&w=2	Third Party Advisory
70	http://marc.info/?l=bugtraq&m=140852826008699&w=2	Third Party Advisory
71	http://marc.info/?l=bugtraq&m=140870499402361&w=2	Third Party Advisory
72	http://marc.info/?l=bugtraq&m=140870499402361&w=2	Third Party Advisory
73	http://marc.info/?l=bugtraq&m=140904544427729&w=2	Third Party Advisory
74	http://marc.info/?l=bugtraq&m=140904544427729&w=2	Third Party Advisory
75	http://marc.info/?l=bugtraq&m=140983229106599&w=2	Third Party Advisory
76	http://marc.info/?l=bugtraq&m=140983229106599&w=2	Third Party Advisory
77	http://marc.info/?l=bugtraq&m=141025641601169&w=2	Third Party Advisory
78	http://marc.info/?l=bugtraq&m=141025641601169&w=2	Third Party Advisory
79	http://marc.info/?l=bugtraq&m=141147110427269&w=2	Third Party Advisory
80	http://marc.info/?l=bugtraq&m=141147110427269&w=2	Third Party Advisory
81	http://marc.info/?l=bugtraq&m=141164638606214&w=2	Third Party Advisory
82	http://marc.info/?l=bugtraq&m=141164638606214&w=2	Third Party Advisory
83	http://marc.info/?l=bugtraq&m=141383410222440&w=2	Third Party Advisory
84	http://marc.info/?l=bugtraq&m=141383410222440&w=2	Third Party Advisory
85	http://marc.info/?l=bugtraq&m=141383465822787&w=2	Third Party Advisory
86	http://marc.info/?l=bugtraq&m=141383465822787&w=2	Third Party Advisory
87	http://marc.info/?l=bugtraq&m=141658880509699&w=2	Third Party Advisory
88	http://marc.info/?l=bugtraq&m=141658880509699&w=2	Third Party Advisory
89	http://marc.info/?l=bugtraq&m=142350350616251&w=2	Third Party Advisory
90	http://marc.info/?l=bugtraq&m=142350350616251&w=2	Third Party Advisory
91	http://marc.info/?l=bugtraq&m=142350350616251&w=2	Third Party Advisory
92	http://marc.info/?l=bugtraq&m=142350350616251&w=2	Third Party Advisory
93	http://marc.info/?l=bugtraq&m=142546741516006&w=2	Third Party Advisory
94	http://marc.info/?l=bugtraq&m=142546741516006&w=2	Third Party Advisory
95	http://marc.info/?l=bugtraq&m=142805027510172&w=2	Third Party Advisory
96	http://marc.info/?l=bugtraq&m=142805027510172&w=2	Third Party Advisory
97	http://puppetlabs.com/security/cve/cve-2014-0224	Third Party Advisory
98	http://puppetlabs.com/security/cve/cve-2014-0224	Third Party Advisory
99	http://rhn.redhat.com/errata/RHSA-2014-0624.html	Third Party Advisory
100	http://rhn.redhat.com/errata/RHSA-2014-0624.html	Third Party Advisory
101	http://rhn.redhat.com/errata/RHSA-2014-0626.html	Third Party Advisory
102	http://rhn.redhat.com/errata/RHSA-2014-0626.html	Third Party Advisory
103	http://rhn.redhat.com/errata/RHSA-2014-0627.html	Third Party Advisory
104	http://rhn.redhat.com/errata/RHSA-2014-0627.html	Third Party Advisory
105	http://rhn.redhat.com/errata/RHSA-2014-0630.html	Third Party Advisory
106	http://rhn.redhat.com/errata/RHSA-2014-0630.html	Third Party Advisory
107	http://rhn.redhat.com/errata/RHSA-2014-0631.html	Third Party Advisory
108	http://rhn.redhat.com/errata/RHSA-2014-0631.html	Third Party Advisory
109	http://rhn.redhat.com/errata/RHSA-2014-0632.html	Third Party Advisory
110	http://rhn.redhat.com/errata/RHSA-2014-0632.html	Third Party Advisory
111	http://rhn.redhat.com/errata/RHSA-2014-0633.html	Third Party Advisory
112	http://rhn.redhat.com/errata/RHSA-2014-0633.html	Third Party Advisory
113	http://rhn.redhat.com/errata/RHSA-2014-0680.html	Third Party Advisory
114	http://rhn.redhat.com/errata/RHSA-2014-0680.html	Third Party Advisory
115	http://seclists.org/fulldisclosure/2014/Dec/23	Mailing List Third Party Advisory
116	http://seclists.org/fulldisclosure/2014/Dec/23	Mailing List Third Party Advisory
117	http://seclists.org/fulldisclosure/2014/Jun/38	Mailing List Third Party Advisory
118	http://seclists.org/fulldisclosure/2014/Jun/38	Mailing List Third Party Advisory
119	http://secunia.com/advisories/58128	Third Party Advisory
120	http://secunia.com/advisories/58128	Third Party Advisory
121	http://secunia.com/advisories/58337	Third Party Advisory
122	http://secunia.com/advisories/58337	Third Party Advisory
123	http://secunia.com/advisories/58385	Third Party Advisory
124	http://secunia.com/advisories/58385	Third Party Advisory
125	http://secunia.com/advisories/58433	Third Party Advisory
126	http://secunia.com/advisories/58433	Third Party Advisory
127	http://secunia.com/advisories/58492	Third Party Advisory
128	http://secunia.com/advisories/58492	Third Party Advisory
129	http://secunia.com/advisories/58579	Third Party Advisory
130	http://secunia.com/advisories/58579	Third Party Advisory
131	http://secunia.com/advisories/58615	Third Party Advisory
132	http://secunia.com/advisories/58615	Third Party Advisory
133	http://secunia.com/advisories/58639	Third Party Advisory
134	http://secunia.com/advisories/58639	Third Party Advisory
135	http://secunia.com/advisories/58660	Third Party Advisory
136	http://secunia.com/advisories/58660	Third Party Advisory
137	http://secunia.com/advisories/58667	Third Party Advisory
138	http://secunia.com/advisories/58667	Third Party Advisory
139	http://secunia.com/advisories/58713	Third Party Advisory
140	http://secunia.com/advisories/58713	Third Party Advisory
141	http://secunia.com/advisories/58714	Third Party Advisory
142	http://secunia.com/advisories/58714	Third Party Advisory
143	http://secunia.com/advisories/58716	Third Party Advisory
144	http://secunia.com/advisories/58716	Third Party Advisory
145	http://secunia.com/advisories/58719	Third Party Advisory
146	http://secunia.com/advisories/58719	Third Party Advisory
147	http://secunia.com/advisories/58742	Third Party Advisory
148	http://secunia.com/advisories/58742	Third Party Advisory
149	http://secunia.com/advisories/58743	Third Party Advisory
150	http://secunia.com/advisories/58743	Third Party Advisory
151	http://secunia.com/advisories/58745	Third Party Advisory
152	http://secunia.com/advisories/58745	Third Party Advisory
153	http://secunia.com/advisories/58759	Third Party Advisory
154	http://secunia.com/advisories/58759	Third Party Advisory
155	http://secunia.com/advisories/58930	Third Party Advisory
156	http://secunia.com/advisories/58930	Third Party Advisory
157	http://secunia.com/advisories/58939	Third Party Advisory
158	http://secunia.com/advisories/58939	Third Party Advisory
159	http://secunia.com/advisories/58945	Third Party Advisory
160	http://secunia.com/advisories/58945	Third Party Advisory
161	http://secunia.com/advisories/58977	Third Party Advisory
162	http://secunia.com/advisories/58977	Third Party Advisory
163	http://secunia.com/advisories/59004	Third Party Advisory
164	http://secunia.com/advisories/59004	Third Party Advisory
165	http://secunia.com/advisories/59012	Third Party Advisory
166	http://secunia.com/advisories/59012	Third Party Advisory
167	http://secunia.com/advisories/59040	Third Party Advisory
168	http://secunia.com/advisories/59040	Third Party Advisory
169	http://secunia.com/advisories/59043	Third Party Advisory
170	http://secunia.com/advisories/59043	Third Party Advisory
171	http://secunia.com/advisories/59055	Third Party Advisory
172	http://secunia.com/advisories/59055	Third Party Advisory
173	http://secunia.com/advisories/59063	Third Party Advisory
174	http://secunia.com/advisories/59063	Third Party Advisory
175	http://secunia.com/advisories/59093	Third Party Advisory
176	http://secunia.com/advisories/59093	Third Party Advisory
177	http://secunia.com/advisories/59101	Third Party Advisory
178	http://secunia.com/advisories/59101	Third Party Advisory
179	http://secunia.com/advisories/59120	Third Party Advisory
180	http://secunia.com/advisories/59120	Third Party Advisory
181	http://secunia.com/advisories/59126	Third Party Advisory
182	http://secunia.com/advisories/59126	Third Party Advisory
183	http://secunia.com/advisories/59132	Third Party Advisory
184	http://secunia.com/advisories/59132	Third Party Advisory
185	http://secunia.com/advisories/59135	Third Party Advisory
186	http://secunia.com/advisories/59135	Third Party Advisory
187	http://secunia.com/advisories/59142	Third Party Advisory
188	http://secunia.com/advisories/59142	Third Party Advisory
189	http://secunia.com/advisories/59162	Third Party Advisory
190	http://secunia.com/advisories/59162	Third Party Advisory
191	http://secunia.com/advisories/59163	Third Party Advisory
192	http://secunia.com/advisories/59163	Third Party Advisory
193	http://secunia.com/advisories/59167	Third Party Advisory
194	http://secunia.com/advisories/59167	Third Party Advisory
195	http://secunia.com/advisories/59175	Third Party Advisory
196	http://secunia.com/advisories/59175	Third Party Advisory
197	http://secunia.com/advisories/59186	Third Party Advisory
198	http://secunia.com/advisories/59186	Third Party Advisory
199	http://secunia.com/advisories/59188	Third Party Advisory
200	http://secunia.com/advisories/59188	Third Party Advisory
201	http://secunia.com/advisories/59189	Third Party Advisory
202	http://secunia.com/advisories/59189	Third Party Advisory
203	http://secunia.com/advisories/59190	Third Party Advisory
204	http://secunia.com/advisories/59190	Third Party Advisory
205	http://secunia.com/advisories/59191	Third Party Advisory
206	http://secunia.com/advisories/59191	Third Party Advisory
207	http://secunia.com/advisories/59192	Third Party Advisory
208	http://secunia.com/advisories/59192	Third Party Advisory
209	http://secunia.com/advisories/59202	Third Party Advisory
210	http://secunia.com/advisories/59202	Third Party Advisory
211	http://secunia.com/advisories/59211	Third Party Advisory
212	http://secunia.com/advisories/59211	Third Party Advisory
213	http://secunia.com/advisories/59214	Third Party Advisory
214	http://secunia.com/advisories/59214	Third Party Advisory
215	http://secunia.com/advisories/59215	Third Party Advisory
216	http://secunia.com/advisories/59215	Third Party Advisory
217	http://secunia.com/advisories/59223	Third Party Advisory
218	http://secunia.com/advisories/59223	Third Party Advisory
219	http://secunia.com/advisories/59231	Third Party Advisory
220	http://secunia.com/advisories/59231	Third Party Advisory
221	http://secunia.com/advisories/59264	Third Party Advisory
222	http://secunia.com/advisories/59264	Third Party Advisory
223	http://secunia.com/advisories/59282	Third Party Advisory
224	http://secunia.com/advisories/59282	Third Party Advisory
225	http://secunia.com/advisories/59284	Third Party Advisory
226	http://secunia.com/advisories/59284	Third Party Advisory
227	http://secunia.com/advisories/59287	Third Party Advisory
228	http://secunia.com/advisories/59287	Third Party Advisory
229	http://secunia.com/advisories/59300	Third Party Advisory
230	http://secunia.com/advisories/59300	Third Party Advisory
231	http://secunia.com/advisories/59301	Third Party Advisory
232	http://secunia.com/advisories/59301	Third Party Advisory
233	http://secunia.com/advisories/59305	Third Party Advisory
234	http://secunia.com/advisories/59305	Third Party Advisory
235	http://secunia.com/advisories/59306	Third Party Advisory
236	http://secunia.com/advisories/59306	Third Party Advisory
237	http://secunia.com/advisories/59310	Third Party Advisory
238	http://secunia.com/advisories/59310	Third Party Advisory
239	http://secunia.com/advisories/59325	Third Party Advisory
240	http://secunia.com/advisories/59325	Third Party Advisory
241	http://secunia.com/advisories/59338	Third Party Advisory
242	http://secunia.com/advisories/59338	Third Party Advisory
243	http://secunia.com/advisories/59342	Third Party Advisory
244	http://secunia.com/advisories/59342	Third Party Advisory
245	http://secunia.com/advisories/59347	Third Party Advisory
246	http://secunia.com/advisories/59347	Third Party Advisory
247	http://secunia.com/advisories/59354	Third Party Advisory
248	http://secunia.com/advisories/59354	Third Party Advisory
249	http://secunia.com/advisories/59362	Third Party Advisory
250	http://secunia.com/advisories/59362	Third Party Advisory
251	http://secunia.com/advisories/59364	Third Party Advisory
252	http://secunia.com/advisories/59364	Third Party Advisory
253	http://secunia.com/advisories/59365	Third Party Advisory
254	http://secunia.com/advisories/59365	Third Party Advisory
255	http://secunia.com/advisories/59368	Third Party Advisory
256	http://secunia.com/advisories/59368	Third Party Advisory
257	http://secunia.com/advisories/59370	Third Party Advisory
258	http://secunia.com/advisories/59370	Third Party Advisory
259	http://secunia.com/advisories/59374	Third Party Advisory
260	http://secunia.com/advisories/59374	Third Party Advisory
261	http://secunia.com/advisories/59375	Third Party Advisory
262	http://secunia.com/advisories/59375	Third Party Advisory
263	http://secunia.com/advisories/59380	Third Party Advisory
264	http://secunia.com/advisories/59380	Third Party Advisory
265	http://secunia.com/advisories/59383	Third Party Advisory
266	http://secunia.com/advisories/59383	Third Party Advisory
267	http://secunia.com/advisories/59389	Third Party Advisory
268	http://secunia.com/advisories/59389	Third Party Advisory
269	http://secunia.com/advisories/59413	Third Party Advisory
270	http://secunia.com/advisories/59413	Third Party Advisory
271	http://secunia.com/advisories/59429	Third Party Advisory
272	http://secunia.com/advisories/59429	Third Party Advisory
273	http://secunia.com/advisories/59435	Third Party Advisory
274	http://secunia.com/advisories/59435	Third Party Advisory
275	http://secunia.com/advisories/59437	Third Party Advisory
276	http://secunia.com/advisories/59437	Third Party Advisory
277	http://secunia.com/advisories/59438	Third Party Advisory
278	http://secunia.com/advisories/59438	Third Party Advisory
279	http://secunia.com/advisories/59440	Third Party Advisory
280	http://secunia.com/advisories/59440	Third Party Advisory
281	http://secunia.com/advisories/59441	Third Party Advisory
282	http://secunia.com/advisories/59441	Third Party Advisory
283	http://secunia.com/advisories/59442	Third Party Advisory
284	http://secunia.com/advisories/59442	Third Party Advisory
285	http://secunia.com/advisories/59444	Third Party Advisory
286	http://secunia.com/advisories/59444	Third Party Advisory
287	http://secunia.com/advisories/59445	Third Party Advisory
288	http://secunia.com/advisories/59445	Third Party Advisory
289	http://secunia.com/advisories/59446	Third Party Advisory
290	http://secunia.com/advisories/59446	Third Party Advisory
291	http://secunia.com/advisories/59447	Third Party Advisory
292	http://secunia.com/advisories/59447	Third Party Advisory
293	http://secunia.com/advisories/59448	Third Party Advisory
294	http://secunia.com/advisories/59448	Third Party Advisory
295	http://secunia.com/advisories/59449	Third Party Advisory
296	http://secunia.com/advisories/59449	Third Party Advisory
297	http://secunia.com/advisories/59450	Third Party Advisory
298	http://secunia.com/advisories/59450	Third Party Advisory
299	http://secunia.com/advisories/59451	Third Party Advisory
300	http://secunia.com/advisories/59451	Third Party Advisory
301	http://secunia.com/advisories/59454	Third Party Advisory
302	http://secunia.com/advisories/59454	Third Party Advisory
303	http://secunia.com/advisories/59459	Third Party Advisory
304	http://secunia.com/advisories/59459	Third Party Advisory
305	http://secunia.com/advisories/59460	Third Party Advisory
306	http://secunia.com/advisories/59460	Third Party Advisory
307	http://secunia.com/advisories/59483	Third Party Advisory
308	http://secunia.com/advisories/59483	Third Party Advisory
309	http://secunia.com/advisories/59490	Third Party Advisory
310	http://secunia.com/advisories/59490	Third Party Advisory
311	http://secunia.com/advisories/59491	Third Party Advisory
312	http://secunia.com/advisories/59491	Third Party Advisory
313	http://secunia.com/advisories/59495	Third Party Advisory
314	http://secunia.com/advisories/59495	Third Party Advisory
315	http://secunia.com/advisories/59502	Third Party Advisory
316	http://secunia.com/advisories/59502	Third Party Advisory
317	http://secunia.com/advisories/59506	Third Party Advisory
318	http://secunia.com/advisories/59506	Third Party Advisory
319	http://secunia.com/advisories/59514	Third Party Advisory
320	http://secunia.com/advisories/59514	Third Party Advisory
321	http://secunia.com/advisories/59518	Third Party Advisory
322	http://secunia.com/advisories/59518	Third Party Advisory
323	http://secunia.com/advisories/59525	Third Party Advisory
324	http://secunia.com/advisories/59525	Third Party Advisory
325	http://secunia.com/advisories/59528	Third Party Advisory
326	http://secunia.com/advisories/59528	Third Party Advisory
327	http://secunia.com/advisories/59529	Third Party Advisory
328	http://secunia.com/advisories/59529	Third Party Advisory
329	http://secunia.com/advisories/59530	Third Party Advisory
330	http://secunia.com/advisories/59530	Third Party Advisory
331	http://secunia.com/advisories/59589	Third Party Advisory
332	http://secunia.com/advisories/59589	Third Party Advisory
333	http://secunia.com/advisories/59602	Third Party Advisory
334	http://secunia.com/advisories/59602	Third Party Advisory
335	http://secunia.com/advisories/59655	Third Party Advisory
336	http://secunia.com/advisories/59655	Third Party Advisory
337	http://secunia.com/advisories/59659	Third Party Advisory
338	http://secunia.com/advisories/59659	Third Party Advisory
339	http://secunia.com/advisories/59661	Third Party Advisory
340	http://secunia.com/advisories/59661	Third Party Advisory
341	http://secunia.com/advisories/59666	Third Party Advisory
342	http://secunia.com/advisories/59666	Third Party Advisory
343	http://secunia.com/advisories/59669	Third Party Advisory
344	http://secunia.com/advisories/59669	Third Party Advisory
345	http://secunia.com/advisories/59677	Third Party Advisory
346	http://secunia.com/advisories/59677	Third Party Advisory
347	http://secunia.com/advisories/59721	Third Party Advisory
348	http://secunia.com/advisories/59721	Third Party Advisory
349	http://secunia.com/advisories/59784	Third Party Advisory
350	http://secunia.com/advisories/59784	Third Party Advisory
351	http://secunia.com/advisories/59824	Third Party Advisory
352	http://secunia.com/advisories/59824	Third Party Advisory
353	http://secunia.com/advisories/59827	Third Party Advisory
354	http://secunia.com/advisories/59827	Third Party Advisory
355	http://secunia.com/advisories/59878	Third Party Advisory
356	http://secunia.com/advisories/59878	Third Party Advisory
357	http://secunia.com/advisories/59885	Third Party Advisory
358	http://secunia.com/advisories/59885	Third Party Advisory
359	http://secunia.com/advisories/59894	Third Party Advisory
360	http://secunia.com/advisories/59894	Third Party Advisory
361	http://secunia.com/advisories/59916	Third Party Advisory
362	http://secunia.com/advisories/59916	Third Party Advisory
363	http://secunia.com/advisories/59990	Third Party Advisory
364	http://secunia.com/advisories/59990	Third Party Advisory
365	http://secunia.com/advisories/60049	Third Party Advisory
366	http://secunia.com/advisories/60049	Third Party Advisory
367	http://secunia.com/advisories/60066	Third Party Advisory
368	http://secunia.com/advisories/60066	Third Party Advisory
369	http://secunia.com/advisories/60176	Third Party Advisory
370	http://secunia.com/advisories/60176	Third Party Advisory
371	http://secunia.com/advisories/60522	Third Party Advisory
372	http://secunia.com/advisories/60522	Third Party Advisory
373	http://secunia.com/advisories/60567	Third Party Advisory
374	http://secunia.com/advisories/60567	Third Party Advisory
375	http://secunia.com/advisories/60571	Third Party Advisory
376	http://secunia.com/advisories/60571	Third Party Advisory
377	http://secunia.com/advisories/60577	Third Party Advisory
378	http://secunia.com/advisories/60577	Third Party Advisory
379	http://secunia.com/advisories/60819	Third Party Advisory
380	http://secunia.com/advisories/60819	Third Party Advisory
381	http://secunia.com/advisories/61254	Third Party Advisory
382	http://secunia.com/advisories/61254	Third Party Advisory
383	http://secunia.com/advisories/61815	Third Party Advisory
384	http://secunia.com/advisories/61815	Third Party Advisory
385	http://security.gentoo.org/glsa/glsa-201407-05.xml	Third Party Advisory
386	http://security.gentoo.org/glsa/glsa-201407-05.xml	Third Party Advisory
387	http://support.apple.com/kb/HT6443	Third Party Advisory
388	http://support.apple.com/kb/HT6443	Third Party Advisory
389	http://support.citrix.com/article/CTX140876	Third Party Advisory
390	http://support.citrix.com/article/CTX140876	Third Party Advisory
391	http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html	Third Party Advisory
392	http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html	Third Party Advisory
393	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl	Third Party Advisory
394	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl	Third Party Advisory
395	http://www.blackberry.com/btsc/KB36051	Third Party Advisory
396	http://www.blackberry.com/btsc/KB36051	Third Party Advisory
397	http://www.fortiguard.com/advisory/FG-IR-14-018/	Third Party Advisory
398	http://www.fortiguard.com/advisory/FG-IR-14-018/	Third Party Advisory
399	http://www.f-secure.com/en/web/labs_global/fsc-2014-6	Third Party Advisory
400	http://www.f-secure.com/en/web/labs_global/fsc-2014-6	Third Party Advisory
401	http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm	Third Party Advisory
402	http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm	Third Party Advisory
403	http://www.ibm.com/support/docview.wss?uid=isg3T1020948	Broken Link
404	http://www.ibm.com/support/docview.wss?uid=isg3T1020948	Broken Link
405	http://www.ibm.com/support/docview.wss?uid=ssg1S1004678	Third Party Advisory
406	http://www.ibm.com/support/docview.wss?uid=ssg1S1004678	Third Party Advisory
407	http://www.ibm.com/support/docview.wss?uid=swg1IT02314	Third Party Advisory
408	http://www.ibm.com/support/docview.wss?uid=swg1IT02314	Third Party Advisory
409	http://www.ibm.com/support/docview.wss?uid=swg21676356	Third Party Advisory
410	http://www.ibm.com/support/docview.wss?uid=swg21676356	Third Party Advisory
411	http://www.ibm.com/support/docview.wss?uid=swg21676793	Broken Link
412	http://www.ibm.com/support/docview.wss?uid=swg21676793	Broken Link
413	http://www.ibm.com/support/docview.wss?uid=swg21676877	Third Party Advisory
414	http://www.ibm.com/support/docview.wss?uid=swg21676877	Third Party Advisory
415	http://www.ibm.com/support/docview.wss?uid=swg24037783	Third Party Advisory
416	http://www.ibm.com/support/docview.wss?uid=swg24037783	Third Party Advisory
417	http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf	Third Party Advisory
418	http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf	Third Party Advisory
419	http://www.kb.cert.org/vuls/id/978508	Third Party Advisory US Government Resource
420	http://www.kb.cert.org/vuls/id/978508	Third Party Advisory US Government Resource
421	http://www.kerio.com/support/kerio-control/release-history	Third Party Advisory
422	http://www.kerio.com/support/kerio-control/release-history	Third Party Advisory
423	http://www.mandriva.com/security/advisories?name=MDVSA-2014:105	Third Party Advisory
424	http://www.mandriva.com/security/advisories?name=MDVSA-2014:105	Third Party Advisory
425	http://www.mandriva.com/security/advisories?name=MDVSA-2014:106	Third Party Advisory
426	http://www.mandriva.com/security/advisories?name=MDVSA-2014:106	Third Party Advisory
427	http://www.mandriva.com/security/advisories?name=MDVSA-2015:062	Third Party Advisory
428	http://www.mandriva.com/security/advisories?name=MDVSA-2015:062	Third Party Advisory
429	http://www.novell.com/support/kb/doc.php?id=7015264	Third Party Advisory
430	http://www.novell.com/support/kb/doc.php?id=7015264	Third Party Advisory
431	http://www.novell.com/support/kb/doc.php?id=7015300	Third Party Advisory
432	http://www.novell.com/support/kb/doc.php?id=7015300	Third Party Advisory
433	http://www.openssl.org/news/secadv_20140605.txt	Vendor Advisory
434	http://www.openssl.org/news/secadv_20140605.txt	Vendor Advisory
435	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch
436	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch
437	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	Patch Third Party Advisory
438	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	Patch Third Party Advisory
439	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	Patch Third Party Advisory
440	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	Patch Third Party Advisory
441	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	Patch Third Party Advisory
442	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	Patch Third Party Advisory
443	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	Third Party Advisory
444	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html	Third Party Advisory
445	http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	Third Party Advisory
446	http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	Third Party Advisory
447	http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html	Third Party Advisory
448	http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html	Third Party Advisory
449	http://www.securityfocus.com/archive/1/534161/100/0/threaded	Not Applicable Third Party Advisory VDB Entry
450	http://www.securityfocus.com/archive/1/534161/100/0/threaded	Not Applicable Third Party Advisory VDB Entry
451	http://www.securitytracker.com/id/1031032	Third Party Advisory VDB Entry
452	http://www.securitytracker.com/id/1031032	Third Party Advisory VDB Entry
453	http://www.securitytracker.com/id/1031594	Third Party Advisory VDB Entry
454	http://www.securitytracker.com/id/1031594	Third Party Advisory VDB Entry
455	http://www.splunk.com/view/SP-CAAAM2D	Third Party Advisory
456	http://www.splunk.com/view/SP-CAAAM2D	Third Party Advisory
457	http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download	Third Party Advisory
458	http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download	Third Party Advisory
459	http://www.vmware.com/security/advisories/VMSA-2014-0006.html	Third Party Advisory
460	http://www.vmware.com/security/advisories/VMSA-2014-0006.html	Third Party Advisory
461	http://www.vmware.com/security/advisories/VMSA-2014-0012.html	Third Party Advisory
462	http://www.vmware.com/security/advisories/VMSA-2014-0012.html	Third Party Advisory
463	http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	Third Party Advisory
464	http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0	Third Party Advisory
465	http://www-01.ibm.com/support/docview.wss?uid=isg400001841	Third Party Advisory
466	http://www-01.ibm.com/support/docview.wss?uid=isg400001841	Third Party Advisory
467	http://www-01.ibm.com/support/docview.wss?uid=isg400001843	Third Party Advisory
468	http://www-01.ibm.com/support/docview.wss?uid=isg400001843	Third Party Advisory
469	http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163	Third Party Advisory
470	http://www-01.ibm.com/support/docview.wss?uid=nas8N1020163	Third Party Advisory
471	http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172	Third Party Advisory
472	http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172	Third Party Advisory
473	http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690	Third Party Advisory
474	http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690	Third Party Advisory
475	http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506	Third Party Advisory
476	http://www-01.ibm.com/support/docview.wss?uid=swg1IV61506	Third Party Advisory
477	http://www-01.ibm.com/support/docview.wss?uid=swg21673137	Third Party Advisory
478	http://www-01.ibm.com/support/docview.wss?uid=swg21673137	Third Party Advisory
479	http://www-01.ibm.com/support/docview.wss?uid=swg21675626	Third Party Advisory
480	http://www-01.ibm.com/support/docview.wss?uid=swg21675626	Third Party Advisory
481	http://www-01.ibm.com/support/docview.wss?uid=swg21675821	Third Party Advisory
482	http://www-01.ibm.com/support/docview.wss?uid=swg21675821	Third Party Advisory
483	http://www-01.ibm.com/support/docview.wss?uid=swg21676035	Third Party Advisory
484	http://www-01.ibm.com/support/docview.wss?uid=swg21676035	Third Party Advisory
485	http://www-01.ibm.com/support/docview.wss?uid=swg21676062	Third Party Advisory
486	http://www-01.ibm.com/support/docview.wss?uid=swg21676062	Third Party Advisory
487	http://www-01.ibm.com/support/docview.wss?uid=swg21676071	Third Party Advisory
488	http://www-01.ibm.com/support/docview.wss?uid=swg21676071	Third Party Advisory
489	http://www-01.ibm.com/support/docview.wss?uid=swg21676333	Third Party Advisory
490	http://www-01.ibm.com/support/docview.wss?uid=swg21676333	Third Party Advisory
491	http://www-01.ibm.com/support/docview.wss?uid=swg21676334	Third Party Advisory
492	http://www-01.ibm.com/support/docview.wss?uid=swg21676334	Third Party Advisory
493	http://www-01.ibm.com/support/docview.wss?uid=swg21676419	Third Party Advisory
494	http://www-01.ibm.com/support/docview.wss?uid=swg21676419	Third Party Advisory
495	http://www-01.ibm.com/support/docview.wss?uid=swg21676478	Third Party Advisory
496	http://www-01.ibm.com/support/docview.wss?uid=swg21676478	Third Party Advisory
497	http://www-01.ibm.com/support/docview.wss?uid=swg21676496	Third Party Advisory
498	http://www-01.ibm.com/support/docview.wss?uid=swg21676496	Third Party Advisory
499	http://www-01.ibm.com/support/docview.wss?uid=swg21676501	Third Party Advisory
500	http://www-01.ibm.com/support/docview.wss?uid=swg21676501	Third Party Advisory
501	http://www-01.ibm.com/support/docview.wss?uid=swg21676529	Third Party Advisory
502	http://www-01.ibm.com/support/docview.wss?uid=swg21676529	Third Party Advisory
503	http://www-01.ibm.com/support/docview.wss?uid=swg21676536	Third Party Advisory
504	http://www-01.ibm.com/support/docview.wss?uid=swg21676536	Third Party Advisory
505	http://www-01.ibm.com/support/docview.wss?uid=swg21676615	Third Party Advisory
506	http://www-01.ibm.com/support/docview.wss?uid=swg21676615	Third Party Advisory
507	http://www-01.ibm.com/support/docview.wss?uid=swg21676644	Third Party Advisory
508	http://www-01.ibm.com/support/docview.wss?uid=swg21676644	Third Party Advisory
509	http://www-01.ibm.com/support/docview.wss?uid=swg21676655	Third Party Advisory
510	http://www-01.ibm.com/support/docview.wss?uid=swg21676655	Third Party Advisory
511	http://www-01.ibm.com/support/docview.wss?uid=swg21676786	Third Party Advisory
512	http://www-01.ibm.com/support/docview.wss?uid=swg21676786	Third Party Advisory
513	http://www-01.ibm.com/support/docview.wss?uid=swg21676833	Third Party Advisory
514	http://www-01.ibm.com/support/docview.wss?uid=swg21676833	Third Party Advisory
515	http://www-01.ibm.com/support/docview.wss?uid=swg21676845	Third Party Advisory
516	http://www-01.ibm.com/support/docview.wss?uid=swg21676845	Third Party Advisory
517	http://www-01.ibm.com/support/docview.wss?uid=swg21676879	Third Party Advisory
518	http://www-01.ibm.com/support/docview.wss?uid=swg21676879	Third Party Advisory
519	http://www-01.ibm.com/support/docview.wss?uid=swg21676889	Third Party Advisory
520	http://www-01.ibm.com/support/docview.wss?uid=swg21676889	Third Party Advisory
521	http://www-01.ibm.com/support/docview.wss?uid=swg21677080	Third Party Advisory
522	http://www-01.ibm.com/support/docview.wss?uid=swg21677080	Third Party Advisory
523	http://www-01.ibm.com/support/docview.wss?uid=swg21677131	Third Party Advisory
524	http://www-01.ibm.com/support/docview.wss?uid=swg21677131	Third Party Advisory
525	http://www-01.ibm.com/support/docview.wss?uid=swg21677390	Third Party Advisory
526	http://www-01.ibm.com/support/docview.wss?uid=swg21677390	Third Party Advisory
527	http://www-01.ibm.com/support/docview.wss?uid=swg21677527	Third Party Advisory
528	http://www-01.ibm.com/support/docview.wss?uid=swg21677527	Third Party Advisory
529	http://www-01.ibm.com/support/docview.wss?uid=swg21677567	Third Party Advisory
530	http://www-01.ibm.com/support/docview.wss?uid=swg21677567	Third Party Advisory
531	http://www-01.ibm.com/support/docview.wss?uid=swg21677695	Third Party Advisory
532	http://www-01.ibm.com/support/docview.wss?uid=swg21677695	Third Party Advisory
533	http://www-01.ibm.com/support/docview.wss?uid=swg21677828	Third Party Advisory
534	http://www-01.ibm.com/support/docview.wss?uid=swg21677828	Third Party Advisory
535	http://www-01.ibm.com/support/docview.wss?uid=swg21677836	Third Party Advisory
536	http://www-01.ibm.com/support/docview.wss?uid=swg21677836	Third Party Advisory
537	http://www-01.ibm.com/support/docview.wss?uid=swg21678167	Third Party Advisory
538	http://www-01.ibm.com/support/docview.wss?uid=swg21678167	Third Party Advisory
539	http://www-01.ibm.com/support/docview.wss?uid=swg21678233	Third Party Advisory
540	http://www-01.ibm.com/support/docview.wss?uid=swg21678233	Third Party Advisory
541	http://www-01.ibm.com/support/docview.wss?uid=swg21678289	Third Party Advisory
542	http://www-01.ibm.com/support/docview.wss?uid=swg21678289	Third Party Advisory
543	http://www-01.ibm.com/support/docview.wss?uid=swg21683332	Third Party Advisory
544	http://www-01.ibm.com/support/docview.wss?uid=swg21683332	Third Party Advisory
545	http://www-01.ibm.com/support/docview.wss?uid=swg24037727	Third Party Advisory
546	http://www-01.ibm.com/support/docview.wss?uid=swg24037727	Third Party Advisory
547	http://www-01.ibm.com/support/docview.wss?uid=swg24037729	Third Party Advisory
548	http://www-01.ibm.com/support/docview.wss?uid=swg24037729	Third Party Advisory
549	http://www-01.ibm.com/support/docview.wss?uid=swg24037730	Third Party Advisory
550	http://www-01.ibm.com/support/docview.wss?uid=swg24037730	Third Party Advisory
551	http://www-01.ibm.com/support/docview.wss?uid=swg24037731	Third Party Advisory
552	http://www-01.ibm.com/support/docview.wss?uid=swg24037731	Third Party Advisory
553	http://www-01.ibm.com/support/docview.wss?uid=swg24037732	Third Party Advisory
554	http://www-01.ibm.com/support/docview.wss?uid=swg24037732	Third Party Advisory
555	http://www-01.ibm.com/support/docview.wss?uid=swg24037761	Third Party Advisory
556	http://www-01.ibm.com/support/docview.wss?uid=swg24037761	Third Party Advisory
557	http://www-01.ibm.com/support/docview.wss?uid=swg24037870	Third Party Advisory
558	http://www-01.ibm.com/support/docview.wss?uid=swg24037870	Third Party Advisory
559	http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E	Third Party Advisory
560	http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E	Third Party Advisory
561	http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E	Third Party Advisory
562	http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E	Third Party Advisory
563	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737	Third Party Advisory
564	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737	Third Party Advisory
565	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740	Third Party Advisory
566	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740	Third Party Advisory
567	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754	Third Party Advisory
568	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754	Third Party Advisory
569	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755	Third Party Advisory
570	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755	Third Party Advisory
571	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756	Third Party Advisory
572	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756	Third Party Advisory
573	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757	Third Party Advisory
574	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757	Third Party Advisory
575	https://access.redhat.com/site/blogs/766093/posts/908133	Third Party Advisory
576	https://access.redhat.com/site/blogs/766093/posts/908133	Third Party Advisory
577	https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues	Third Party Advisory
578	https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues	Third Party Advisory
579	https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1	Third Party Advisory
580	https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1	Third Party Advisory
581	https://bugzilla.redhat.com/show_bug.cgi?id=1103586	Issue Tracking
582	https://bugzilla.redhat.com/show_bug.cgi?id=1103586	Issue Tracking
583	https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf	Third Party Advisory
584	https://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf	Third Party Advisory
585	https://discussions.nessus.org/thread/7517	Third Party Advisory
586	https://discussions.nessus.org/thread/7517	Third Party Advisory
587	https://filezilla-project.org/versions.php?type=server	Third Party Advisory
588	https://filezilla-project.org/versions.php?type=server	Third Party Advisory
589	https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441
590	https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441
591	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946	Third Party Advisory
592	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946	Third Party Advisory
593	https://kb.bluecoat.com/index?page=content&id=SA80	Third Party Advisory
594	https://kb.bluecoat.com/index?page=content&id=SA80	Third Party Advisory
595	https://kc.mcafee.com/corporate/index?page=content&id=SB10075	Third Party Advisory
596	https://kc.mcafee.com/corporate/index?page=content&id=SB10075	Third Party Advisory
597	https://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005	Broken Link
598	https://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005	Broken Link
599	https://www.ibm.com/support/docview.wss?uid=ssg1S1004670	Third Party Advisory
600	https://www.ibm.com/support/docview.wss?uid=ssg1S1004670	Third Party Advisory
601	https://www.ibm.com/support/docview.wss?uid=ssg1S1004671	Third Party Advisory
602	https://www.ibm.com/support/docview.wss?uid=ssg1S1004671	Third Party Advisory
603	https://www.imperialviolet.org/2014/06/05/earlyccs.html	Exploit
604	https://www.imperialviolet.org/2014/06/05/earlyccs.html	Exploit
605	https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf	Third Party Advisory
606	https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf	Third Party Advisory
607	https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf	Third Party Advisory
608	https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf	Third Party Advisory
609	https://www.novell.com/support/kb/doc.php?id=7015271	Third Party Advisory
610	https://www.novell.com/support/kb/doc.php?id=7015271	Third Party Advisory

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-326	不適切な暗号強度	https://cwe.mitre.org/data/definitions/326.html

JVN脆弱性情報

OpenSSL における Change Cipher Spec メッセージの処理に脆弱性

タイトル	OpenSSL における Change Cipher Spec メッセージの処理に脆弱性
概要	OpenSSL には、初期 SSL/TLS ハンドシェイクにおける Change Cipher Spec メッセージの処理に脆弱性が存在します。最初の SSL/TLS ハンドシェイクでは、暗号化通信で使われる暗号化鍵を生成するために鍵情報の交換を行い、それに続き Change Cipher Spec メッセージがサーバからクライアントへ、クライアントからサーバへ送られます。 OpenSSL には、Change Cipher Spec プロトコルの実装に問題があり、鍵情報の交換の前に Change Cipher Spec メッセージを受け取ると、空の鍵情報を使って暗号化鍵を生成してしまいます (CWE-325)。この脆弱性情報は、情報セキュリティ早期警戒パートナーシップに基づき下記の方が IPA に報告し、JPCERT/CC が開発者との調整を行いました。報告者: 株式会社レピダム菊池正史氏
想定される影響	サーバとクライアント間の SSL/TLS 通信が、中間者攻撃 (man-in-the-middle attack) によって解読されたり、改ざんされたりする可能性があります。
対策	[アップデートする] 開発者が提供する情報をもとに最新版へアップデートしてください。
公表日	2014年6月6日0:00
登録日	2014年6月6日12:01
最終更新日	2016年11月22日16:00

影響を受けるシステム

OpenSSL Project

OpenSSL 1.0.1 系列のうち OpenSSL 1.0.1g およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-0224	//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224
National Vulnerability Database (NVD)
2	CVE-2014-0224	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0224
Puppet
3	CVE-2014-0224	http://puppetlabs.com/security/cve/cve-2014-0224
SECURITY BLOG
4	CVE-2014-0224 Cryptographic Issues vulnerability in OpenSSL	https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1
5	CVE-2014-0224 Cryptographic Issues vulnerability in WAN Boot	https://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	名前	URL
Apple Security Updates
1	HT6443	http://support.apple.com/kb/HT6443
Apple セキュリティアップデート
2	HT6443	http://support.apple.com/kb/HT6443?viewlocale=ja_JP
Asianux Technical Support Network
3	openssl-0.9.8e-27.AXS3.3	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=3749&sType=&sProduct=&published=1
4	openssl-1.0.1e-16.AXS4.14	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=3747&sType=&sProduct=&published=1
5	openssl097a-0.9.7a-12.AXS3.1	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=3750&sType=&sProduct=&published=1
6	openssl098e-0.9.8e-18.AXS4.2	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=3748&sType=&sProduct=&published=1
BlackBerry Knowledge Base
7	KB36051	http://btsc.webapps.blackberry.com/btsc/viewdocument.do;jsessionid=D8D85AAEDAC42CA663FA1479E20410CD?externalId=KB36051&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.a
Cisco Security Advisory
8	cisco-sa-20140605-openssl	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl
FileZilla
9	Version history	https://filezilla-project.org/versions.php?type=server
FortiGuard Security Advisories
10	Multiple Vulnerabilities in OpenSSL	http://www.fortiguard.com/advisory/FG-IR-14-018/
Hitachi Incdent Response Team
11	HIRT-PUB14010	http://www.hitachi.co.jp/hirt/publications/hirt-pub14010/index.html
Hitachi Software Vulnerability Information
12	HS15-012	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS15-012/index.html
HP Security Bulletin
13	HPSBMU03053 SSRT101613	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c04347711
14	HPSBMU03058 SSRT101591	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c04351097
15	HPSBMU03070 SSRT101637	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c04368546
16	HPSBMU03216	http://marc.info/?l=bugtraq&m=142350350616251&w=2
17	HPSBST03195	http://marc.info/?l=bugtraq&m=142805027510172&w=2
18	HPSBST03265	http://marc.info/?l=bugtraq&m=142546741516006&w=2
IBM Support Document
19	00001841	http://www-01.ibm.com/support/docview.wss?uid=isg400001841
20	00001843	http://www-01.ibm.com/support/docview.wss?uid=isg400001843
21	1676062	http://www-01.ibm.com/support/docview.wss?uid=swg21676062
22	1676419	http://www-01.ibm.com/support/docview.wss?uid=swg21676419
23	1676496	http://www-01.ibm.com/support/docview.wss?uid=swg21676496
24	1676655	http://www-01.ibm.com/support/docview.wss?uid=swg21676655
25	1676845	http://www-01.ibm.com/support/docview.wss?uid=swg21676845
26	1677390	http://www-01.ibm.com/support/docview.wss?uid=swg21677390
27	1677567	http://www-01.ibm.com/support/docview.wss?uid=swg21677567
28	1677695	http://www-01.ibm.com/support/docview.wss?uid=swg21677695
29	1677828	http://www-01.ibm.com/support/docview.wss?uid=swg21677828
30	1678167	http://www-01.ibm.com/support/docview.wss?uid=swg21678167
31	1678289	http://www-01.ibm.com/support/docview.wss?uid=swg21678289
32	4037761	http://www-01.ibm.com/support/docview.wss?uid=swg24037761
33	IBM Flex System Integrated Management Module II (IMM2) is affected by the following OpenSSL vulnerability: CVE-2014-0224	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737
34	IBM System Networking switches that are affected by the OpenSSL vulnerability: CVE-2014-0224	http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740
35	N1020172	http://www-01.ibm.com/support/docview.wss?uid=nas8N1020172
36	S1004690	http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690
InterSect Alliance International Pty
37	Release Notes for Snare Enterprise Agent for MSSQL v1.2	https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf
38	Release Notes for Snare Enterprise Agent for Windows v4.2	https://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf
JVN
39	アライドテレシス株式会社からの情報	https://jvn.jp/jp/JVN61247051/522154/index.html
40	横河電機株式会社からの情報	http://jvn.jp/jp/JVN61247051/120418/index.html
Kerio Control
41	Kerio Control Release History	http://www.kerio.com/support/kerio-control/release-history
Knowledge Base
42	2079783	http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2079783
Knowledgebase
43	7015264	http://www.novell.com/support/kb/doc.php?id=7015264
44	7015300	http://www.novell.com/support/kb/doc.php?id=7015300
McAfee
45	SB10075	https://kc.mcafee.com/corporate/index?page=content&id=SB10075
MySQL
46	Changes in MySQL Workbench 6.1.7 (2014-06-27)	http://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html
NEC製品セキュリティ情報
47	AV14-002	http://jpn.nec.com/security-info/av14-002.html
48	NV15-011	http://jpn.nec.com/security-info/secinfo/nv15-011.html
OpenSSL
49	Fix for CVE-2014-0224	https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=bc8923b1ec9c467755cd86f7848c50ee8812e441
50	Tarballs	http://www.openssl.org/source/
OpenSSL Security Advisory
51	OpenSSL Security Advisory [05 Jun 2014] SSL/TLS MITM vulnerability (CVE-2014-0224)	http://www.openssl.org/news/secadv_20140605.txt
Oracle
52	ELSA-2014-1053	http://linux.oracle.com/errata/ELSA-2014-1053.html
Oracle Critical Patch Update
53	Oracle Critical Patch Update Advisory - January 2015	http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
54	Oracle Critical Patch Update Advisory - July 2014	http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
55	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
56	Oracle Critical Patch Update Advisory - October 2014	http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
57	Oracle Critical Patch Update Advisory - October 2016	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
58	Text Form of Oracle Critical Patch Update - January 2015 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujan2015verbose-1972976.html
59	Text Form of Oracle Critical Patch Update - July 2014 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2014verbose-1972958.html
60	Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpujul2016verbose-2881721.html
61	Text Form of Oracle Critical Patch Update - October 2014 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuoct2014verbose-1972962.html
62	Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices	http://www.oracle.com/technetwork/security-advisory/cpuoct2016verbose-2881725.html
Red Hat Bugzilla
63	Bug 1103586	https://bugzilla.redhat.com/show_bug.cgi?id=1103586
Red Hat Security Advisory
64	RHSA-2014:0624	https://rhn.redhat.com/errata/RHSA-2014-0624.html
65	RHSA-2014:0626	https://rhn.redhat.com/errata/RHSA-2014-0626.html
66	RHSA-2014:0627	https://rhn.redhat.com/errata/RHSA-2014-0627.html
67	RHSA-2014:0630	https://rhn.redhat.com/errata/RHSA-2014-0630.html
68	RHSA-2014:0631	https://rhn.redhat.com/errata/RHSA-2014-0631.html
69	RHSA-2014:0632	https://rhn.redhat.com/errata/RHSA-2014-0632.html
70	RHSA-2014:0633	https://rhn.redhat.com/errata/RHSA-2014-0633.html
71	RHSA-2014:0680	https://rhn.redhat.com/errata/RHSA-2014-0680.html
Red Hat Security Blog
72	OpenSSL MITM CCS injection attack (CVE-2014-0224)	https://access.redhat.com/site/blogs/766093/posts/908133
RTシリーズのセキュリティに関するFAQ
73	OpenSSL「Change Cipher Specメッセージ処理」の脆弱性について	http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU978508.html
Security Advisories
74	SA80	https://kb.bluecoat.com/index?page=content&id=SA80
Security Advisory
75	Huawei-SA-20140613-OpenSSL	http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm
SECURITY BLOG
76	January 2015 Critical Patch Update Released	https://blogs.oracle.com/security/entry/january_2015_critical_patch_update
77	July 2014 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2014_critical_patch_update
78	July 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/july_2016_critical_patch_update
79	October 2014 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2014_critical_patch_update
80	October 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/october_2016_critical_patch_update
Splunk
81	Splunk Enterprise 6.1.2, 6.0.5 and 5.0.9 address two vulnerabilities - July 1, 2014	http://www.splunk.com/view/SP-CAAAM2D
Technical bulletin
82	Announcing PTF MH01438 for HMC Version 7 Release 7.6.0 Service Pack 3	http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E
83	Announcing PTF MH01439 for HMC Version 7 Release 7.7.0 Service Pack 3	http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E
Tenable Network Security
84	Nessus 5.2.7 and PVS 4.0.3 Are Available for Download	http://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download
85	Nessus 5.2.7 Now Available	https://discussions.nessus.org/thread/7517
Turbolinux Security Advisory
86	TLSA-2014-3	http://www.turbolinux.co.jp/security/2014/TLSA-2014-3j.html
VMware Security Advisories
87	VMSA-2014-0006	http://www.vmware.com/security/advisories/VMSA-2014-0006.html
サポート
88	OpenSSL CCS Injection の脆弱性 (CVE-2014-0224) の影響と対処	https://users.miraclelinux.com/support/?q=node/423
サーバ・クライアント製品セキュリティ情報
89	OpenSSLの脆弱性(CVE-2014-0224他)によるHA8500シリーズへの影響について	http://www.hitachi.co.jp/products/it/server/security/info/vulnerable/openssl_cve20140224_ha8500.html
90	OpenSSLの脆弱性(CVE-2014-0224他)によるテープライブラリ装置への影響について	http://www.hitachi.co.jp/products/it/server/security/info/vulnerable/openssl_cve20140224_tape_library.html
シスコセキュリティアドバイザリ
91	cisco-sa-20140605-openssl	http://www.cisco.com/cisco/web/support/JP/112/1122/1122700_cisco-sa-20140605-openssl-j.html
ソフトウェア製品セキュリティ情報
92	HS15-012	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS15-012/index.html
トレンドマイクロ Q&Aページ
93	アラート/アドバイザリ: OpenSSL の脆弱性 (CVE-2014-0224) について	http://esupport.trendmicro.com/solution/ja-jp/1103804.aspx
トレンドマイクロサポート情報
94	Trend Micro products and the CCS Injection Vulnerability - [CVE-2014-0224] OpenSSL Vulnerability	http://esupport.trendmicro.com/solution/en-US/1103813.aspx
富士通セキュリティ情報
95	OpenSSL における Change Cipher Spec メッセージの処理に脆弱性 (CVE-2014-0224)	http://software.fujitsu.com/jp/security/vulnerabilities/jvn-61247051.html
96	Symantec Backup Exec 2012/ ETERNUS BE50: OpenSSL における Change Cipher Spec メッセージ処理の脆弱性 (CVE-2014-0224)	http://software.fujitsu.com/jp/security/products-fujitsu/solution/backup_exec201401.html
97	Symfoware Server: OpenSSLの脆弱性(CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-3470)	http://software.fujitsu.com/jp/security/products-fujitsu/solution/symfoware_201404.html
98	Systemwalker Centric Manager: OpenSSL における Change Cipher Spec メッセージの処理に脆弱性(JVNDB-2014-000048)	http://software.fujitsu.com/jp/security/products-fujitsu/solution/systemwalker_centric_mgr201401.html
99	Systemwalker Desktop Keeper, Systemwalker Desktop Patrol: OpenSSL の Change Cipher Spec メッセージの処理に脆弱性(CVE-2014-0224)	http://software.fujitsu.com/jp/security/products-fujitsu/solution/systemwalker_dtkp201402.html
100	Systemwalker Runbook Automation: OpenSSL における Change Cipher Spec メッセージの処理に脆弱性(CVE-2014-0224)	http://software.fujitsu.com/jp/security/products-fujitsu/solution/sw_rba201401.html
101	Systemwalker Service Quality Coordinator: OpenSSL における Change Cipher Spec メッセージの処理に脆弱性(CVE-2014-0224)	http://software.fujitsu.com/jp/security/products-fujitsu/solution/sw_sqc201401.html
東芝テック
102	複合機のセキュリティ対策について（更新）	http://www.toshibatec.co.jp/page.jsp?id=4152
製品セキュリティ情報
103	OpenSSL における Change Cipher Spec メッセージの処理に脆弱性 (CVE-2014-0224)	http://buffalo.jp/support_s/s20141001_2.html

その他

No	名前	URL
CERT-FI
1	Haavoittuvuuksia OpenSSL-kirjastossa	https://www.cert.fi/haavoittuvuudet/2014/haavoittuvuus-2014-075.html
ICS-CERT ADVISORY
2	ICSA-14-156-01	http://ics-cert.us-cert.gov/advisories/ICSA-14-156-01
3	ICSA-14-198-03	https://ics-cert.us-cert.gov/advisories/ICSA-14-198-03
IETF
4	Change Cipher Spec	http://tools.ietf.org/html/rfc5246#section-7.1
IPA 重要なセキュリティ情報
5	「OpenSSL」における Change Cipher Spec メッセージ処理の脆弱性対策について(JVN#61247051)	http://www.ipa.go.jp/security/ciadr/vul/20140606-jvn.html
JVN
6	JVN#61247051	http://jvn.jp/jp/JVN61247051/index.html
7	JVNVU#93868849	http://jvn.jp/vu/JVNVU93868849/index.html
US-CERT Vulnerability Note
8	VU#978508	http://www.kb.cert.org/vuls/id/978508
関連文書
9	CCS Injection Vulnerability	http://ccsinjection.lepidum.co.jp/ja.html
10	CCS Injection脆弱性(CVE-2014-0224)発見の経緯についての紹介	http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Injection/index.html
11	Here is the timeline from my (OpenSSL) perspective for the recent CCS Injection (MITM) vulnerability as well as the other flaws being fixed today	https://plus.google.com/app/basic/stream/z12xhp3hbzbhhjgfm22ncvtbeua1dpaa004
12	株式会社アラタナの告知ページ	http://www.aratana.jp/security/detail.php?id=9

変更履歴

No	変更内容	変更日
0	[2014年06月06日] 掲載 [2014年06月09日] ベンダ情報：OpenSSL Project (Fix for CVE-2014-0224) を追加ベンダ情報：ミラクル・リナックス (OpenSSL CCS Injection の脆弱性 (CVE-2014-0224) の影響と対処) を追加ベンダ情報：ヤマハ (OpenSSL「Change Cipher Specメッセージ処理」の脆弱性について) を追加ベンダ情報：富士通 (OpenSSL における Change Cipher Spec メッセージの処理に脆弱性 (CVE-2014-0224)) を追加ベンダ情報：レッドハット (OpenSSL MITM CCS injection attack (CVE-2014-0224)) を追加ベンダ情報：レッドハット (Bug 1103586) を追加参考情報：National Vulnerability Database (NVD) (CVE-2014-0224) を追加参考情報：ICS-CERT ADVISORY (ICSA-14-156-01) を追加 [2014年06月10日] ベンダ情報：トレンドマイクロ (アラート/アドバイザリ: OpenSSL の脆弱性 (CVE-2014-0224) について) を追加 [2014年06月11日] ベンダ情報：ミラクル・リナックス (openssl-1.0.1e-16.AXS4.14) を追加ベンダ情報：ミラクル・リナックス (openssl098e-0.9.8e-18.AXS4.2) を追加ベンダ情報：ミラクル・リナックス (openssl-0.9.8e-27.AXS3.3) を追加ベンダ情報：ミラクル・リナックス (openssl097a-0.9.7a-12.AXS3.1) を追加 [2014年06月16日] ベンダ情報：横河電機株式会社 (横河電機株式会社からの情報) を追加ベンダ情報：富士通 (Systemwalker Runbook Automation: OpenSSL における Change Cipher Spec メッセージの処理に脆弱性(CVE-2014-0224)) を追加ベンダ情報：富士通 (Systemwalker Service Quality Coordinator: OpenSSL における Change Cipher Spec メッセージの処理に脆弱性(CVE-2014-0224)) を追加 [2014年06月23日] ベンダ情報：オラクル (CVE-2014-0224 Cryptographic Issues vulnerability in OpenSSL) を追加ベンダ情報：オラクル (CVE-2014-0224 Cryptographic Issues vulnerability in WAN Boot) を追加 [2014年06月24日] ベンダ情報：日立 (HIRT-PUB14010) を追加 [2014年06月26日] ベンダ情報：ターボリナックス (TLSA-2014-3) を追加 [2014年06月27日] ベンダ情報：シスコシステムズ (cisco-sa-20140605-openssl) を追加ベンダ情報：ブルーコートシステムズ (SA80) を追加 [2014年07月01日] ベンダ情報：VMware (2079783) を追加ベンダ情報：VMware (VMSA-2014-0006) を追加ベンダ情報：富士通 (Systemwalker Desktop Keeper, Systemwalker Desktop Patrol: OpenSSL の Change Cipher Spec メッセージの処理に脆弱性(CVE-2014-0224)) を追加 [2014年07月09日] ベンダ情報：富士通 (Systemwalker Centric Manager: OpenSSL における Change Cipher Spec メッセージの処理に脆弱性(JVNDB-2014-000048)) を追加 [2014年07月11日] ベンダ情報：Kerio Technologies (Kerio Control Release History) を追加ベンダ情報：富士通 (Symantec Backup Exec 2012/ ETERNUS BE50: OpenSSL における Change Cipher Spec メッセージ処理の脆弱性 (CVE-2014-0224)) を追加 [2014年07月16日] ベンダ情報：富士通 (Symfoware Server: OpenSSLの脆弱性(CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-3470)) を追加 [2014年07月18日] ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2014) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2014 Risk Matrices) を追加ベンダ情報：オラクル (July 2014 Critical Patch Update Released) を追加参考情報：ICS-CERT ADVISORY (ICSA-14-198-03) を追加 [2014年08月05日] ベンダ情報：レッドハット (RHSA-2014:0624) を追加ベンダ情報：レッドハット (RHSA-2014:0626) を追加ベンダ情報：レッドハット (RHSA-2014:0627) を追加ベンダ情報：レッドハット (RHSA-2014:0630) を追加ベンダ情報：レッドハット (RHSA-2014:0631) を追加ベンダ情報：レッドハット (RHSA-2014:0632) を追加ベンダ情報：レッドハット (RHSA-2014:0633) を追加ベンダ情報：レッドハット (RHSA-2014:0680) を追加ベンダ情報：BlackBerry (KB36051) を追加ベンダ情報：FileZilla (Version history) を追加ベンダ情報：Huawei (Huawei-SA-20140613-OpenSSL) を追加ベンダ情報：InterSect Alliance International Pty (Release Notes for Snare Enterprise Agent for MSSQL v1.2) を追加ベンダ情報：InterSect Alliance International Pty (Release Notes for Snare Enterprise Agent for Windows v4.2) を追加ベンダ情報：Novell (7015300) を追加ベンダ情報：Novell (7015264) を追加ベンダ情報：Splunk (Splunk Enterprise 6.1.2, 6.0.5 and 5.0.9 address two vulnerabilities - July 1, 2014) を追加ベンダ情報：Tenable Network Security (Nessus 5.2.7 and PVS 4.0.3 Are Available for Download) を追加ベンダ情報：Tenable Network Security (Nessus 5.2.7 Now Available) を追加ベンダ情報：オラクル (Changes in MySQL Workbench 6.1.7 (2014-06-27)) を追加ベンダ情報：トレンドマイクロ (Trend Micro products and the CCS Injection Vulnerability - [CVE-2014-0224] OpenSSL Vulnerability) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03053 SSRT101613) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03058 SSRT101591) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03070 SSRT101637) を追加ベンダ情報：マカフィー (SB10075) を追加ベンダ情報：IBM (00001841) を追加ベンダ情報：IBM (00001843) を追加ベンダ情報：IBM (N1020172) を追加ベンダ情報：IBM (S1004690) を追加ベンダ情報：IBM (1673137) を追加ベンダ情報：IBM (1676035) を追加ベンダ情報：IBM (1676062) を追加ベンダ情報：IBM (1676419) を追加ベンダ情報：IBM (1676496) を追加ベンダ情報：IBM (1676655) を追加ベンダ情報：IBM (1676845) を追加ベンダ情報：IBM (1677390) を追加ベンダ情報：IBM (1677567) を追加ベンダ情報：IBM (1677695) を追加ベンダ情報：IBM (1677828) を追加ベンダ情報：IBM (1678167) を追加ベンダ情報：IBM (1678289) を追加ベンダ情報：IBM (4037761) を追加ベンダ情報：IBM (IBM Flex System Integrated Management Module II (IMM2) is affected by the following OpenSSL vulnerability: CVE-2014-0224) を追加ベンダ情報：IBM (IBM System Networking switches that are affected by the OpenSSL vulnerability: CVE-2014-0224) を追加ベンダ情報：IBM (Announcing PTF MH01439 for HMC Version 7 Release 7.7.0 Service Pack 3) を追加ベンダ情報：IBM (Announcing PTF MH01438 for HMC Version 7 Release 7.6.0 Service Pack 3) を追加ベンダ情報：フォーティネット (Multiple Vulnerabilities in OpenSSL) を追加 [2014年08月18日] ベンダ情報：Puppet Labs (CVE-2014-0224) を追加 [2014年09月10日] ベンダ情報：オラクル (ELSA-2014-1053) を追加 [2014年09月24日] ベンダ情報：アップル (HT6443) を追加参考情報：JVN (JVNVU#93868849) を追加 [2014年10月06日] ベンダ情報：バッファロー (OpenSSL における Change Cipher Spec メッセージの処理に脆弱性 (CVE-2014-0224)) を追加 [2014年10月21日] ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2014) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - October 2014 Risk Matrices) を追加ベンダ情報：オラクル (October 2014 Critical Patch Update Released) を追加 [2015年01月22日] ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - January 2015) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - January 2015 Risk Matrices) を追加ベンダ情報：オラクル (January 2015 Critical Patch Update Released) を追加 [2015年04月22日] ベンダ情報：日立 (HS15-012) を追加 [2015年06月26日] ベンダ情報：ヒューレット・パッカード (HPSBST03195) を追加ベンダ情報：ヒューレット・パッカード (HPSBST03265) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03216) を追加 [2015年10月28日] ベンダ情報：日本電気 (NV15-011) を追加 [2015年12月17日] ベンダ情報：日立 (OpenSSLの脆弱性(CVE-2014-0224他)によるHA8500シリーズへの影響について) を追加ベンダ情報：日立 (OpenSSLの脆弱性(CVE-2014-0224他)によるテープライブラリ装置への影響について)による影響について) を追加 [2016年07月27日] ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - July 2016 Risk Matrices) を追加ベンダ情報：オラクル (July 2016 Critical Patch Update Released) を追加 [2016年11月22日] ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - October 2016 Risk Matrices) を追加ベンダ情報：オラクル (October 2016 Critical Patch Update Released) を追加	2018年2月17日10:37

構成2	以上	以下	より上	未満
cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
cpe:2.3:a:redhat:storage:2.1:::::::*
cpe:2.3:o:redhat:enterprise_linux:4:::::::*
cpe:2.3:o:redhat:enterprise_linux:5:::::::*
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.1:::::::*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:::::::*
cpe:2.3:o:fedoraproject:fedora:20:::::::*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.2.3:::::::*
cpe:2.3:o:fedoraproject:fedora:19:::::::*
cpe:2.3:o:opensuse:opensuse:13.1:::::::*
cpe:2.3:o:opensuse:opensuse:13.2:::::::*