Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1792HistoryJun 12, 2015 - 7:59 p.m.
CVE-2015-1792
2015-06-1219:59:05
Debian Security Bug Tracker
security-tracker.debian.org
26
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.628
Percentile
97.9%
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
Related
openssl
openssl
Vulnerability in OpenSSL - CMS verify infinite loop with unknown hash function
2015-06-11 00:00:00
f5
f5
SOL16915 - OpenSSL vulnerability CVE-2015-1792
2015-07-07 00:00:00
K16915 : OpenSSL vulnerability CVE-2015-1792
2015-07-07 00:00:00
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2017-02-10 05:07:32
Denial Of Service (DoS)
2019-05-02 05:39:36
openvas
openvas
F5 BIG-IP - OpenSSL vulnerability CVE-2015-1792
2015-09-18 00:00:00
OpenSSL Multiple Vulnerabilities (20150611 - 2) - Windows
2015-12-01 00:00:00
OpenSSL Multiple Vulnerabilities (20150611 - 2) - Linux
2015-12-01 00:00:00
cvelist
cvelist
CVE-2015-1792
2015-06-12 00:00:00
nvd
nvd
CVE-2015-1792
2015-06-12 19:59:05
cve
cve
CVE-2015-1792
2015-06-12 19:59:05
prion
prion
Code injection
2015-06-12 19:59:00
nessus
nessus
RHEL 7 : openssl098e (Unpatched Vulnerability)
2024-06-03 00:00:00
Fedora 21 : openssl-1.0.1k-10.fc21 (2015-10108)
2015-06-25 00:00:00
RHEL 6 : openssl098e (Unpatched Vulnerability)
2024-06-03 00:00:00
ubuntucve
ubuntucve
CVE-2015-1792
2015-06-11 00:00:00
slackware
slackware
[slackware-security] openssl
2015-06-11 23:01:09
redhat
redhat
(RHSA-2015:1115) Moderate: openssl security update
2015-06-15 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2015-06-13 00:00:00
[USN-2639-1] OpenSSL vulnerabilities
2015-06-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt3
2015-06-15 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt3
2015-06-15 00:00:00
osv
osv
openssl - security update
2015-06-17 00:00:00
openssl - security update
2015-06-13 00:00:00
libcrypto38-2.5.0-1.1 on GA media
2024-06-15 00:00:00
centos
centos
openssl security update
2015-06-15 20:01:35
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-06-11 00:00:00
debian
debian
[SECURITY] [DLA 247-1] openssl security update
2015-06-17 21:46:50
[SECURITY] [DSA 3287-1] openssl security update
2015-06-13 14:32:55
fedora
fedora
[SECURITY] Fedora 22 Update: openssl-1.0.1k-10.fc22
2015-06-21 00:19:25
[SECURITY] Fedora 22 Update: openssl-1.0.1k-11.fc22
2015-07-13 19:18:15
[SECURITY] Fedora 21 Update: openssl-1.0.1k-10.fc21
2015-06-24 15:57:49
mageia
mageia
Updated openssl package fixes security vulnerabilities
2015-06-19 16:33:05
cisco
cisco
Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products
2015-06-12 16:00:00
archlinux
archlinux
openssl: multiple issues
2015-06-12 00:00:00
suse
suse
Security update for openssl (important)
2015-06-25 18:05:48
Security update for compat-openssl098 (important)
2015-06-26 13:05:09
Security update for OpenSSL (important)
2015-07-03 14:06:19
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:10.openssl
2015-06-12 00:00:00
freebsd
freebsd
openssl -- multiple vulnerabilities
2015-06-11 00:00:00
oraclelinux
oraclelinux
openssl security update
2015-06-15 00:00:00
openssl security update
2015-12-14 00:00:00
openssl security update
2016-09-27 00:00:00
amazon
amazon
Medium: openssl
2015-06-16 11:29:00
arista
arista
Security Advisory 0011
2015-06-17 00:00:00
fortinet
fortinet
OpenSSL vulnerabilities - June 2015
2015-06-11 00:00:00
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-07-15 00:20:05
paloalto
paloalto
OpenSSL Vulnerabilities
2016-10-18 00:00:00
OpenSSL Vulnerabilities
2016-08-15 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-06-22 00:00:00
symantec
symantec
SA98 : OpenSSL Security Advisory 11-June-2015
2015-06-17 08:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.628
Percentile
97.9%
Related for DEBIANCVE:CVE-2015-1792