CVE-2015-0293

EPSS 21.25%
Veröffentlicht 19.03.2015 22:59:11
Zuletzt bearbeitet 06.05.2026 22:30:45
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 57

NVD 33 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

OpenSSL ≫ OpenSSL Version <= 0.9.8ze

OpenSSL ≫ OpenSSL Version1.0.0

OpenSSL ≫ OpenSSL Version1.0.0a

OpenSSL ≫ OpenSSL Version1.0.0b

OpenSSL ≫ OpenSSL Version1.0.0c

OpenSSL ≫ OpenSSL Version1.0.0d

OpenSSL ≫ OpenSSL Version1.0.0e

OpenSSL ≫ OpenSSL Version1.0.0f

OpenSSL ≫ OpenSSL Version1.0.0g

OpenSSL ≫ OpenSSL Version1.0.0h

OpenSSL ≫ OpenSSL Version1.0.0i

OpenSSL ≫ OpenSSL Version1.0.0j

OpenSSL ≫ OpenSSL Version1.0.0k

OpenSSL ≫ OpenSSL Version1.0.0l

OpenSSL ≫ OpenSSL Version1.0.0m

OpenSSL ≫ OpenSSL Version1.0.0n

OpenSSL ≫ OpenSSL Version1.0.0o

OpenSSL ≫ OpenSSL Version1.0.0p

OpenSSL ≫ OpenSSL Version1.0.0q

OpenSSL ≫ OpenSSL Version1.0.1

OpenSSL ≫ OpenSSL Version1.0.1a

OpenSSL ≫ OpenSSL Version1.0.1b

OpenSSL ≫ OpenSSL Version1.0.1c

OpenSSL ≫ OpenSSL Version1.0.1d

OpenSSL ≫ OpenSSL Version1.0.1e

OpenSSL ≫ OpenSSL Version1.0.1f

OpenSSL ≫ OpenSSL Version1.0.1g

OpenSSL ≫ OpenSSL Version1.0.1h

OpenSSL ≫ OpenSSL Version1.0.1i

OpenSSL ≫ OpenSSL Version1.0.1j

OpenSSL ≫ OpenSSL Version1.0.1k

OpenSSL ≫ OpenSSL Version1.0.1l

OpenSSL ≫ OpenSSL Version1.0.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	21.25%	0.973

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

http://marc.info/?l=bugtraq&m=144050155601375&w=2

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

https://support.citrix.com/article/CTX216642

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html

http://support.apple.com/kb/HT204942

http://www.mandriva.com/security/advisories?name=MDVSA-2015:062

http://marc.info/?l=bugtraq&m=143748090628601&w=2

http://marc.info/?l=bugtraq&m=144050297101809&w=2

http://rhn.redhat.com/errata/RHSA-2015-0800.html

http://marc.info/?l=bugtraq&m=143213830203296&w=2

http://www.mandriva.com/security/advisories?name=MDVSA-2015:063

https://kc.mcafee.com/corporate/index?page=content&id=SB10110

https://security.gentoo.org/glsa/201503-11

https://www.openssl.org/news/secadv_20150319.txt

Vendor Advisory

http://www.securitytracker.com/id/1031929

https://bto.bluecoat.com/security-advisory/sa92

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html

http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html

http://rhn.redhat.com/errata/RHSA-2015-0715.html

http://rhn.redhat.com/errata/RHSA-2015-0716.html

http://rhn.redhat.com/errata/RHSA-2015-0752.html

http://www.ubuntu.com/usn/USN-2537-1

https://access.redhat.com/articles/1384453

https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html

http://www.securityfocus.com/bid/73232

https://bugzilla.redhat.com/show_bug.cgi?id=1202404

https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=86f8fb0e344d62454f8daf3e15236b2b59210756

https://nvd.nist.gov/vuln/detail/CVE-2015-0293

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0293

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0293

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-0293