Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-0282
HistoryMar 24, 2015 - 5:59 p.m.

CVE-2015-0282

2015-03-2417:59:04
CWE-310
[email protected]
web.nvd.nist.gov
6

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.3

Confidence

High

EPSS

0.005

Percentile

75.5%

JSON

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

Affected configurations

Nvd
Node
gnugnutlsRange≤3.0.9
VendorProductVersionCPE
gnugnutls*cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*

Related

cloudfoundry 1
nessus 12
cvelist 1
debiancve 1
openvas 9
prion 1
ubuntucve 1
cve 1
f5 2
securityvulns 2
osv 2
debian 3
amazon 1
veracode 2
redhat 1
centos 1
ubuntu 1
oraclelinux 1
cloudfoundry
cloudfoundry
CVE-2015-0282 Multiple GnuTLS Vulnerabilities | Cloud Foundry
2015-03-23 00:00:00
nessus
nessus
F5 Networks BIG-IP : GnuTLS RSA PKCS signature vulnerability (K17327)
2015-09-29 00:00:00
Debian DSA-3191-1 : gnutls26 - security update
2015-03-17 00:00:00
Amazon Linux AMI : gnutls (ALAS-2015-575)
2015-08-05 00:00:00
cvelist
cvelist
CVE-2015-0282
2015-03-24 17:00:00
debiancve
debiancve
CVE-2015-0282
2015-03-24 17:59:04
openvas
openvas
F5 BIG-IP - GnuTLS RSA PKCS signature vulnerability CVE-2015-0282
2015-09-30 00:00:00
Debian Security Advisory DSA 3191-1 (gnutls26 - security update)
2015-03-15 00:00:00
Debian: Security Advisory (DSA-3191-1)
2015-03-14 00:00:00
prion
prion
Code injection
2015-03-24 17:59:00
ubuntucve
ubuntucve
CVE-2015-0282
2015-03-12 00:00:00
cve
cve
CVE-2015-0282
2015-03-24 17:59:04
f5
f5
K17327 : GnuTLS RSA PKCS signature vulnerability CVE-2015-0282
2015-09-28 00:00:00
SOL17327 - GnuTLS RSA PKCS signature vulnerability CVE-2015-0282
2015-09-28 00:00:00
securityvulns
securityvulns
GnuTLS security vulnerabilities
2015-03-18 00:00:00
[SECURITY] [DSA 3191-1] gnutls26 security update
2015-03-18 00:00:00
osv
osv
gnutls26 - security update
2015-03-15 00:00:00
gnutls26 - security update
2015-03-25 00:00:00
debian
debian
[SECURITY] [DSA 3191-1] gnutls26 security update
2015-03-15 21:42:48
[SECURITY] [DSA 3191-1] gnutls26 security update
2015-03-15 21:42:48
[SECURITY] [DLA 180-1] gnutls26 security update
2015-03-25 07:50:25
amazon
amazon
Medium: gnutls
2015-08-04 11:36:00
veracode
veracode
Improper Signature Validation
2019-05-02 05:41:06
Improper Signature Validation
2019-05-02 05:41:06
redhat
redhat
(RHSA-2015:1457) Moderate: gnutls security and bug fix update
2015-07-22 00:00:00
centos
centos
gnutls security update
2015-07-26 14:11:38
ubuntu
ubuntu
GnuTLS vulnerabilities
2015-03-23 00:00:00
oraclelinux
oraclelinux
gnutls security and bug fix update
2015-07-28 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.3

Confidence

High

EPSS

0.005

Percentile

75.5%

JSON
Related for NVD:CVE-2015-0282
cloudfoundry1nessus12cvelist1debiancve1openvas9prion1ubuntucve1cve1f52securityvulns2osv2debian3amazon1veracode2redhat1centos1ubuntu1oraclelinux1