Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-0282
HistoryMar 24, 2015 - 5:59 p.m.

CVE-2015-0282

2015-03-2417:59:00
CWE-310
[email protected]
web.nvd.nist.gov
53
gnutls
rsa
pkcs #1
signature algorithm
downgrade attack
cve-2015-0282

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.3%

JSON

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

CPENameOperatorVersion
gnu:gnutlsgnu gnutlsle3.0.9

Related

prion 1
ubuntucve 1
debiancve 1
openvas 9
cloudfoundry 1
f5 2
nessus 11
cvelist 1
debian 3
securityvulns 2
osv 2
veracode 2
amazon 1
centos 1
redhat 1
oraclelinux 1
ubuntu 1
prion
prion
Code injection
2015-03-24 17:59:00
ubuntucve
ubuntucve
CVE-2015-0282
2015-03-12 00:00:00
debiancve
debiancve
CVE-2015-0282
2015-03-24 17:59:00
openvas
openvas
F5 BIG-IP - GnuTLS RSA PKCS signature vulnerability CVE-2015-0282
2015-09-30 00:00:00
Debian: Security Advisory (DSA-3191-1)
2015-03-14 00:00:00
Debian Security Advisory DSA 3191-1 (gnutls26 - security update)
2015-03-15 00:00:00
cloudfoundry
cloudfoundry
CVE-2015-0282 Multiple GnuTLS Vulnerabilities | Cloud Foundry
2015-03-23 00:00:00
f5
f5
K17327 : GnuTLS RSA PKCS signature vulnerability CVE-2015-0282
2015-09-28 00:00:00
SOL17327 - GnuTLS RSA PKCS signature vulnerability CVE-2015-0282
2015-09-28 00:00:00
nessus
nessus
F5 Networks BIG-IP : GnuTLS RSA PKCS signature vulnerability (K17327)
2015-09-29 00:00:00
Debian DSA-3191-1 : gnutls26 - security update
2015-03-17 00:00:00
CentOS 6 : gnutls (CESA-2015:1457)
2015-07-28 00:00:00
cvelist
cvelist
CVE-2015-0282
2015-03-24 17:00:00
debian
debian
[SECURITY] [DSA 3191-1] gnutls26 security update
2015-03-15 21:42:48
[SECURITY] [DSA 3191-1] gnutls26 security update
2015-03-15 21:43:05
[SECURITY] [DLA 180-1] gnutls26 security update
2015-03-25 07:50:43
securityvulns
securityvulns
GnuTLS security vulnerabilities
2015-03-18 00:00:00
[SECURITY] [DSA 3191-1] gnutls26 security update
2015-03-18 00:00:00
osv
osv
gnutls26 - security update
2015-03-15 00:00:00
gnutls26 - security update
2015-03-25 00:00:00
veracode
veracode
Improper Signature Validation
2019-05-02 05:41:06
Improper Signature Validation
2019-05-02 05:41:06
amazon
amazon
Medium: gnutls
2015-08-04 11:36:00
centos
centos
gnutls security update
2015-07-26 14:11:38
redhat
redhat
(RHSA-2015:1457) Moderate: gnutls security and bug fix update
2015-07-22 00:00:00
oraclelinux
oraclelinux
gnutls security and bug fix update
2015-07-28 00:00:00
ubuntu
ubuntu
GnuTLS vulnerabilities
2015-03-23 00:00:00

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.3%

JSON
Related for CVE-2015-0282
prion1ubuntucve1debiancve1openvas9cloudfoundry1f52nessus11cvelist1debian3securityvulns2osv2veracode2amazon1centos1redhat1oraclelinux1ubuntu1