Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-8275HistoryJan 09, 2015 - 2:59 a.m.
CVE-2014-8275
2015-01-0902:59:00
Debian Security Bug Tracker
security-tracker.debian.org
26
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.12 Low
EPSS
Percentile
95.3%
OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate’s unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.1k-1 | openssl_1.0.1k-1_all.deb |
Related
prion
prion
Code injection
2015-01-09 02:59:00
Code injection
2015-08-20 10:59:00
f5
f5
SOL16136 - OpenSSL vulnerability CVE-2014-8275
2015-02-12 00:00:00
K16136 : OpenSSL vulnerability CVE-2014-8275
2015-09-18 00:00:00
ubuntucve
ubuntucve
CVE-2014-8275
2015-01-08 00:00:00
cve
cve
CVE-2014-8275
2015-01-09 02:59:00
CVE-2015-0534
2015-08-20 10:59:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K16136)
2020-10-06 00:00:00
Mac OS X : Cisco AnyConnect Secure Mobility Client < 3.1(7021) <= 4.0(48) Multiple Vulnerabilities (FREAK)
2015-03-26 00:00:00
Debian DLA-132-1 : openssl security update (FREAK)
2015-03-26 00:00:00
veracode
veracode
Protection Mechanism Bypass
2019-01-15 09:05:35
Protection Mechanism Bypass
2017-02-06 02:21:32
openssl
openssl
Vulnerability in OpenSSL CVE-2014-8275
2015-01-05 00:00:00
ibm
ibm
oraclelinux
oraclelinux
openssl security update
2015-02-26 00:00:00
openssl security update
2015-01-20 00:00:00
openssl security update
2015-04-13 00:00:00
debian
debian
[SECURITY] [DLA 132-1] openssl security update
2015-01-11 13:16:17
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
openvas
openvas
Debian: Security Advisory (DLA-132-1)
2023-03-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0182-1)
2021-06-09 00:00:00
Oracle: Security Advisory (ELSA-2015-3010)
2015-10-06 00:00:00
osv
osv
openssl - security update
2015-01-11 00:00:00
openssl - security update
2015-01-11 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-01-12 00:00:00
centos
centos
openssl security update
2015-01-20 21:00:39
openssl security update
2015-04-14 11:25:52
redhat
redhat
(RHSA-2015:0066) Moderate: openssl security update
2015-01-20 00:00:00
(RHSA-2015:0800) Moderate: openssl security update
2015-04-13 00:00:00
securityvulns
securityvulns
[USN-2459-1] OpenSSL vulnerabilities
2015-01-13 00:00:00
ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities
2015-08-24 00:00:00
HP Version Control Repository Manager multiple security vulnerabilities
2015-09-14 00:00:00
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-02-04 06:24:41
suse
suse
Security update for openssl (important)
2015-01-23 20:05:13
Security update for libressl (important)
2015-07-22 15:08:14
Security update for compat-openssl097g (important)
2015-03-24 00:05:09
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1
2015-01-12 00:00:00
archlinux
archlinux
openssl: multiple issues
2015-01-09 00:00:00
kaspersky
kaspersky
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
slackware
slackware
[slackware-security] openssl
2015-01-09 18:34:39
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
amazon
amazon
Medium: openssl
2015-01-11 12:36:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28
fedora
fedora
[SECURITY] Fedora 20 Update: openssl-1.0.1e-41.fc20
2015-01-20 21:05:44
[SECURITY] Fedora 20 Update: openssl-1.0.1e-42.fc20
2015-03-23 07:18:26
citrix
citrix
oracle
oracle
Oracle Critical Patch Update - April 2015
2015-04-14 00:00:00
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.12 Low
EPSS
Percentile
95.3%
Related for DEBIANCVE:CVE-2014-8275