The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before…
Priority LOW 32CWE-310Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- Partial Red Hat: 16 fixed, 1 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.
Why it matters now
EPSS 0.06237 93rd percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 16 fixed, 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* | up to 0.9.8zc | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:* | 1.0.0a | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:* | 1.0.0b | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:* | 1.0.0c | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:* | 1.0.0d | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:* | 1.0.0e | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:* | 1.0.0f | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:* | 1.0.0g | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:* | 1.0.0h | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:* | 1.0.0i | Vulnerable | OpenSSL |
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions up to 0.9.8zc Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:* Versions 1.0.0a Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:* Versions 1.0.0b Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:* Versions 1.0.0c Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:* Versions 1.0.0d Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:* Versions 1.0.0e Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:* Versions 1.0.0f Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:* Versions 1.0.0g Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:* Versions 1.0.0h Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:* Versions 1.0.0i Vulnerable ·OpenSSL
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:* | 1.0.0j | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:* | 1.0.0k | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:* | 1.0.0l | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:* | 1.0.0m | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:* | 1.0.0n | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:* | 1.0.0o | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:* | 1.0.1a | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:* | 1.0.1b | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:* | 1.0.1c | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:* | 1.0.1d | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:* | 1.0.1e | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:* | 1.0.1f | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:* | 1.0.1g | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:* | 1.0.1h | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:* | 1.0.1i | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:* | 1.0.1j | Vulnerable | OpenSSL |
- cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:* Versions 1.0.0j Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:* Versions 1.0.0k Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:* Versions 1.0.0l Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:* Versions 1.0.0m Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:* Versions 1.0.0n Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:* Versions 1.0.0o Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:* Versions 1.0.1a Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:* Versions 1.0.1b Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:* Versions 1.0.1c Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:* Versions 1.0.1d Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:* Versions 1.0.1e Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:* Versions 1.0.1f Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:* Versions 1.0.1g Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:* Versions 1.0.1h Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:* Versions 1.0.1i Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:* Versions 1.0.1j Vulnerable ·OpenSSL
Remediation
Red Hat 1 advisory
- RHSA-2015:0066 Released 2015-01-21 · Red Hat rating Moderateopenssl security update
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-libs-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.1e-34.el7_0.7, openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-libs-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.1e-34.el7_0.7, openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.5, openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.5, openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-30.el6_6.5, openssl-1.0.1e-30.el6_6.5.ppc, openssl-devel-1.0.1e-30.el6_6.5 +1
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-devel-1:1.0.1e-34.el7_0.7, openssl-devel-1:1.0.1e-34.el7_0.7.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-30.el6_6.5, openssl-devel-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-devel-1:1.0.1e-34.el7_0.7, openssl-libs-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Storage 2 | Affected | No fix yet |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2015:0066 |
Not affected: 6 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat JBoss Enterprise Application Platform 6
- Red Hat JBoss Enterprise Web Server 1
- Red Hat JBoss Enterprise Web Server 2
Timeline
- 2026-10-02 Threatist record created from CVE-2014-3572
- 2026-10-03 Alias added: GHSA-38r9-r99v-9jf8
References
Advisory 22
- HPSBOV03318
- openSUSE-SU-2015:0130
- 20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
- HPSBGN03299
- HPSBMU03409
- HPSBMU03380
- HPSBHF03289
- openSUSE-SU-2016:0640
- https://www.openssl.org/news/secadv_20150108.txt
- MDVSA-2015:019
- openSUSE-SU-2015:1277
- RHSA-2015:0066
- HPSBUX03244
- APPLE-SA-2015-04-08-2
- SUSE-SU-2015:0578
- SUSE-SU-2015:0946
- HPSBMU03397
- HPSBMU03396
- HPSBUX03162
- MDVSA-2015:062
- HPSBMU03413
- DSA-3125
Other 13
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- https://support.apple.com/HT204659
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- https://github.com/openssl/openssl/commit/b15f8769644b00ef7283521593360b7b2135cb63
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10108
- https://kc.mcafee.com/corporate/index?page=content&id=SB10102
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- https://support.citrix.com/article/CTX216642
- https://bto.bluecoat.com/security-advisory/sa88
More Openssl vulnerabilities
- TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
- TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
- TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
Sources
- CVE-2014-3572 · CVE Program
- CVE-2014-3572 · NVD
- FIRST EPSS
- GHSA-38r9-r99v-9jf8 · GitHub Advisory Database · CC BY 4.0
- CVE-2014-3572 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences