OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Jun 5, 2014 |
| Apple Osx Note | — | Upgrade macOS to the latest versionApply OS X security update 2014-004 | Aug 28, 2015 | Jun 5, 2014 |
| Apple Osx Openssl | — | Upgrade macOS to the latest versionApply OS X security update 2014-004 | Sep 22, 2014 | Jun 5, 2014 |
| Centos_linux | — | Upgrade opensslUpgrade openssl-staticUpgrade openssl097aUpgrade openssl098eUpgrade openssl-develUpgrade openssl-perl | Dec 1, 2016 | Jun 5, 2014 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Jun 5, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 15, 2015 |
| Freebsd | — | Upgrade FreeBSDUpgrade opensslUpgrade mingw32-openssl | Dec 10, 2025 | Jun 5, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Jun 5, 2014 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 9, 2022 | Jun 5, 2014 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Jun 5, 2014 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Jun 5, 2014 |
| Hpux | — | Update openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate openssl.OPENSSL-PVT to the latest version | Aug 11, 2017 | Jun 5, 2014 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Jun 5, 2014 | Jun 5, 2014 |
| Huawei Vrp | — | Contact Huawei TAC to request the upgrades | May 28, 2026 | Jun 13, 2014 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory9 | Nov 30, 2017 | Jun 5, 2014 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jun 5, 2014 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.0.13-0.175.1.21.0.2.0 on Solaris 11.1Upgrade library/security/openssl/openssl-fips-140 to version 1.2-0.175.1.21.0.2.0 on Solaris 11.1 | May 29, 2017 | Jun 5, 2014 |
| Oracle_linux | — | Upgrade openssl-staticUpgrade openssl-develUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl097aUpgrade opensslUpgrade openssl098e | Mar 22, 2016 | Jun 5, 2014 |
| Panos | — | Update PAN-OS 5.1 to the latest workaround for your deviceUpdate PAN-OS 5.0 to the latest workaround for your deviceUpdate PAN-OS 6.0 to the latest workaround for your device | Oct 12, 2016 | Jun 5, 2014 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.0R4.1Update Pulse Connect Secure to version 7.1R19.1Update Pulse Connect Secure to version 7.4R11.1 | Oct 28, 2020 | Jun 5, 2014 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Jun 5, 2014 |
| Red_hat Jboss_eap | — | — | Nov 14, 2019 | Jun 5, 2014 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade virtualbox-guest-x11Upgrade libopenssl0_9_8-hmacUpgrade firefox-gtk3-immodule-ximUpgrade libfirefox-gmodule-2_0-0Upgrade libmysql55client18-32bitUpgrade mariadb-toolsUpgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl1_1-hmacUpgrade firefox-libffi4Upgrade firefox-gtk3-toolsUpgrade libmysqlclient18-32bitUpgrade firefox-libcairo2Upgrade opensslUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libgtk-3-0Upgrade mariadb-errormessagesUpgrade MozillaFirefox-branding-SLEDUpgrade npm8Upgrade libmysqlclient_r15Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gio-branding-upstreamUpgrade compat-openssl097g-32bitUpgrade libmysqlclient_r18Upgrade firefox-libcairo-gobject2Upgrade openssl-1_0_0-docUpgrade MozillaFirefox-translations-commonUpgrade libfirefox-gthread-2_0-0Upgrade mariadb-clientUpgrade libopenssl1_1Upgrade firefox-libharfbuzz0Upgrade libopenssl-1_1-develUpgrade mariadbUpgrade mozilla-nspr-32bitUpgrade mozilla-nssUpgrade openssl1Upgrade libfreebl3Upgrade firefox-libffi7Upgrade libmysql55client18-x86Upgrade compat-openssl097gUpgrade libmysqlclient-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade openssl-1_1Upgrade mozilla-nspr-develUpgrade libopenssl1_1-hmac-32bitUpgrade firefox-glib2-langUpgrade libopenssl1_0_0-x86Upgrade firefox-gtk3-branding-upstreamUpgrade libmysql55client_r18-32bitUpgrade libmysqlclient15-32bitUpgrade libopenssl0_9_8-x86Upgrade openssl-docUpgrade libfirefox-glib-2_0-0Upgrade libsoftokn3Upgrade libmysqlclient18Upgrade libfreebl3-32bitUpgrade firefox-glib2-toolsUpgrade libmysqlclient15Upgrade mysqlUpgrade libopenssl1-develUpgrade mysql-toolsUpgrade firefox-atk-langUpgrade libopenssl1_0_0-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade openssl-1_0_0Upgrade firefox-gtk3-immodule-thaiUpgrade libopenssl1_1-32bitUpgrade firefox-gtk3-immodule-amharicUpgrade libopenssl-develUpgrade libmysql55client18Upgrade firefox-libatk-1_0-0Upgrade libopenssl0_9_8Upgrade libmysqlclient_r15-32bitUpgrade mozilla-nss-toolsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libmysql55client_r18-x86Upgrade libmysql55client_r18Upgrade firefox-gtk3-dataUpgrade libmysqld-develUpgrade mysql-clientUpgrade libmysqlclient_r15-x86Upgrade libsoftokn3-32bitUpgrade mozilla-nsprUpgrade libopenssl1_0_0-hmac-32bitUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-certs-32bitUpgrade virtualbox-guest-toolsUpgrade firefox-gtk3-langUpgrade libopenssl0_9_8-32bitUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-32bitUpgrade mozilla-nss-certsUpgrade libopenssl1_0_0-hmacUpgrade openssl1-docUpgrade nodejs8-docsUpgrade MozillaFirefoxUpgrade firefox-gdk-pixbuf-langUpgrade virtualbox-guest-kmp-defaultUpgrade mozilla-nss-develUpgrade nodejs8Upgrade libopenssl-1_1-devel-32bitUpgrade libmysqlclient_r18-32bitUpgrade nodejs8-develUpgrade libmysqld18Upgrade libopenssl1_0_0Upgrade libmysqlclient15-x86Upgrade mariadb-100-errormessagesUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade libopenssl-1_0_0-devel | Dec 18, 2015 | Jun 5, 2014 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl0.9.8 | Nov 8, 2024 | Jun 5, 2014 |
| Vmsa 2014 0006 | — | Upgrade VMware ESXi 5.0 to build number 1918656Upgrade VMware ESXi 5.1 to build number 1900470Upgrade VMware ESXi 5.5 to build number 1881737 | Jun 19, 2014 | Jun 5, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub