CVE-2015-1794

🗓️ 06 Dec 2015 00:00:00Reported by redhatType

The ssl3_get_key_exchange function in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message

Reporter	Title	Published	Views	Family All 97
IBM Security Bulletins	Security Bulletin:Multiple Security Vulnerabilities exist in IBM Cognos Insight	24 Feb 202007:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-3193, CVE-2015-3195, CVE-2015-1794)	8 Jun 202122:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletins for IBM Tealeaf Customer Experience offerings	16 Jun 201819:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794)	5 Feb 202000:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Express.	10 Nov 202212:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect Rational Software Architect and Rational Software Architect for WebSphere Software (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794)	10 Sep 202017:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM PureApplication System. (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794)	15 Jun 201807:05	–	ibm

NVD

Node

openssl opensslMatch1.0.2

openssl opensslMatch1.0.2a

openssl opensslMatch1.0.2b

openssl opensslMatch1.0.2c

openssl opensslMatch1.0.2d

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
ubuntu	www.ubuntu.com/usn/USN-2830-1
git	www.git.openssl.org/
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
fortiguard	www.fortiguard.com/advisory/openssl-advisory-december-2015
openssl	www.openssl.org/news/secadv/20151203.txt
lists	www.lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
kb	www.kb.juniper.net/InfoCenter/index

06 May 2026 22:30Current

7High risk

Vulners AI Score7

CVSS 25

EPSS0.09852

CWE-189