Lucene search
OpenSSLOPENSSL:CVE-2015-0285HistoryMar 10, 2015 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2015-0285
2015-03-1000:00:00
www.openssl.org
24
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
7.3
Confidence
High
EPSS
0.006
Percentile
78.7%
Under certain conditions an OpenSSL 1.0.2 client can complete a handshake with an unseeded PRNG. If the handshake succeeds then the client random that has been used will have been generated from a PRNG with insufficient entropy and therefore the output may be predictable.
Related
debiancve
debiancve
CVE-2015-0285
2015-03-19 22:59:03
nvd
nvd
CVE-2015-0285
2015-03-19 22:59:03
ubuntucve
ubuntucve
CVE-2015-0285
2015-03-19 00:00:00
cve
cve
CVE-2015-0285
2015-03-19 22:59:03
veracode
veracode
Cryptographic Protection Bypass
2017-02-10 02:13:15
prion
prion
Code injection
2015-03-19 22:59:00
cvelist
cvelist
CVE-2015-0285
2015-03-19 00:00:00
thn
thn
OpenSSL to Patch High Severity Vulnerability this Week
2015-03-17 22:30:00
f5
f5
openvas
openvas
OpenSSL Multiple Vulnerabilities (20150319 - 2) - Windows
2015-11-24 00:00:00
OpenSSL Multiple Vulnerabilities (20150319 - 2) - Linux
2015-11-24 00:00:00
Gentoo Security Advisory GLSA 201503-11
2015-09-29 00:00:00
nessus
nessus
OpenSSL < 1.0.2a Multiple Vulnerabilities
2015-03-19 00:00:00
stunnel < 5.12 OpenSSL Multiple Vulnerabilities
2015-03-25 00:00:00
OpenSSL 1.0.2 < 1.0.2a Multiple Vulnerabilities
2015-03-27 00:00:00
ibm
ibm
fortinet
fortinet
OpenSSL vulnerabilities - March 2015
2015-03-24 00:00:00
archlinux
archlinux
lib32-openssl: multiple issues
2015-03-19 00:00:00
openssl: multiple issues
2015-03-19 00:00:00
kaspersky
kaspersky
KLA10479 Multiple vulnerabilities in OpenSSL
2015-03-19 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
2015-03-20 20:20:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-03-19 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2015-03-21 00:00:00
ics
ics
Rockwell Automation Stratix 5900
2017-05-10 12:00:00
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
7.3
Confidence
High
EPSS
0.006
Percentile
78.7%
Related for OPENSSL:CVE-2015-0285