AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-3509

MEDIUM · CVSS 6.8 EPSS 13.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-08-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-3509
Severity
MEDIUM
CVSS
6.8
EPSS
13.36%
OpenSSL

Original NVD Description

Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.