CVE ID:	CVE-2014-3512
Description:	Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3512 BugTraq ID: 69083 http://www.securityfocus.com/bid/69083 Debian Security Information: DSA-2998 (Google Search) http://www.debian.org/security/2014/dsa-2998 FreeBSD Security Advisory: FreeBSD-SA-14:18 https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc http://security.gentoo.org/glsa/glsa-201412-39.xml HPdes Security Advisory: HPSBHF03293 http://marc.info/?l=bugtraq&m=142660345230545&w=2 HPdes Security Advisory: SSRT101846 http://marc.info/?l=bugtraq&m=142660345230545&w=2 https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html NETBSD Security Advisory: NetBSD-SA2014-008 ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc http://www.securitytracker.com/id/1030693 http://secunia.com/advisories/59700 http://secunia.com/advisories/59710 http://secunia.com/advisories/59756 http://secunia.com/advisories/60022 http://secunia.com/advisories/60221 http://secunia.com/advisories/60493 http://secunia.com/advisories/60803 http://secunia.com/advisories/60810 http://secunia.com/advisories/60917 http://secunia.com/advisories/60921 http://secunia.com/advisories/61017 http://secunia.com/advisories/61100 http://secunia.com/advisories/61171 http://secunia.com/advisories/61184 http://secunia.com/advisories/61775 http://secunia.com/advisories/61959 SuSE Security Announcement: openSUSE-SU-2014:1052 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html XForce ISS Database: openssl-cve20143512-dos(95158) https://exchange.xforce.ibmcloud.com/vulnerabilities/95158