Vulnerability in OpenSSL CVE-2015-0209

2015-03-1900:00:00

www.openssl.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.099 Low

EPSS

Percentile

94.9%

JSON

Use After Free following d2i_ECPrivatekey error. A malformed EC private key file consumed via the d2i_ECPrivateKey function could cause a use after free condition. This, in turn, could cause a double free in several private key parsing functions (such as d2i_PrivateKey or EVP_PKCS82PKEY) and could lead to a DoS attack or memory corruption for applications that receive EC private keys from untrusted sources. This scenario is considered rare.

veracode 2

prion 1

cve 1

debiancve 1

nessus 51

openvas 38

ubuntucve 1

cvelist 1

f5 2

nvd 1

ibm 44

thn 1