2.6

CVE-2015-1787

The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OpenSSL ≫ OpenSSL Version1.0.2
OpenSSL ≫ OpenSSL Version1.0.2 Updatebeta1
OpenSSL ≫ OpenSSL Version1.0.2 Updatebeta2
OpenSSL ≫ OpenSSL Version1.0.2 Updatebeta3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.35% 0.936
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
Patch
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
Third Party Advisory
http://marc.info/?l=bugtraq&m=144050155601375&w=2
Third Party Advisory
Mailing List
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Third Party Advisory
http://marc.info/?l=bugtraq&m=143748090628601&w=2
Third Party Advisory
Mailing List
http://marc.info/?l=bugtraq&m=144050297101809&w=2
Third Party Advisory
Mailing List
https://kc.mcafee.com/corporate/index?page=content&id=SB10110
Third Party Advisory
https://security.gentoo.org/glsa/201503-11
Third Party Advisory
https://www.openssl.org/news/secadv_20150319.txt
Vendor Advisory
http://www.securitytracker.com/id/1031929
Third Party Advisory
VDB Entry
https://bto.bluecoat.com/security-advisory/sa92
Third Party Advisory
http://www.securityfocus.com/bid/73238
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1202406
Third Party Advisory
Issue Tracking
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b19d8143212ae5fbc9cebfd51c01f802fabccd33