Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence

CVE-2014-0195

Medium

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of…

Published Jun 5, 2014 · Updated Aug 11, 2026 · Also known as DEBIAN-CVE-2014-0195, DSA-2950-1, UBUNTU-CVE-2014-0195, USN-2232-1

Key Facts

Patch immediately
  • CVE-2014-0195 is a medium-severity vulnerability (CVSS 6.8 v2) affecting Mariadb, Openssl, Fedora (Fedoraproject) and 22 more products.
  • It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
  • EPSS estimates a 100% probability of exploitation in the next 30 days.
  • Fixed versions are available, including libmysqlclient_r18 10.0.16-15.1, libmysqlclient_r18-32bit 10.0.16-15.1, libmysqlclient-devel 10.0.16-15.1.
  • Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v2

6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS (30-day exploit likelihood)

100%

Higher than 99.9% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

None known

Get the full CVE-2014-0195 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.

Affected Products

93 affected entries in total
ProductAffected versionsFixed in
MariadbMariadbSee advisory10.0.13
OpensslOpensslSee advisory0.9.8za
FedoraFedoraproject19, 20n/a
LeapOpensuse42.1n/a
OpensuseOpensuse13.2n/a
20 more affected products in the full CVE brief

Patched Releases

libmysqlclient_r18

10.0.16-15.1

libmysqlclient_r18-32bit

10.0.16-15.1

libmysqlclient-devel

10.0.16-15.1

libmysqlclient18

10.0.16-15.1

libmysqlclient18-32bit

10.0.16-15.1

libmysqld-devel

10.0.16-15.1

libmysqld18

10.0.16-15.1

libopenssl-1_1-devel

1.1.1l-1.2

libopenssl-1_1-devel-32bit

1.1.1l-1.2

libopenssl-devel

1.0.2j-2.2

libopenssl-devel-32bit

1.0.2j-2.2

libopenssl0_9_8

0.9.8zh-14.1

libopenssl0_9_8-32bit

0.9.8zh-14.1

libopenssl1_0_0

1.0.1g-0.22.1, 1.0.2j-2.2

libopenssl1_0_0-32bit

1.0.1g-0.22.1, 1.0.2j-2.2

libopenssl1_0_0-hmac

1.0.2j-2.2

libopenssl1_0_0-hmac-32bit

1.0.2j-2.2

libopenssl1_0_0-steam

1.0.2h-4.1

libopenssl1_0_0-steam-32bit

1.0.2h-4.1

libopenssl1_0_0-x86

1.0.1g-0.22.1

libopenssl1_1

1.1.1l-1.2

libopenssl1_1-32bit

1.1.1l-1.2

libopenssl1_1-hmac

1.1.1l-1.2

libopenssl1-devel

1.0.1g-0.22.1

Mariadb

10.0.16-15.1, 10.0.13

Timeline

  1. Publicly disclosed

    Jun 5, 2014

  2. Last updated

    Aug 11, 2026

Weakness Type

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

References

15 more references in the full CVE brief

FAQ

Common Questions.

Is CVE-2014-0195 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo