Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-0209HistoryMar 19, 2015 - 10:59 p.m.
CVE-2015-0209
2015-03-1922:59:00
Debian Security Bug Tracker
security-tracker.debian.org
21
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.119 Low
EPSS
Percentile
95.3%
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.1k-2 | openssl_1.0.1k-2_all.deb |
| Debian | 11 | all | openssl | < 1.0.1k-2 | openssl_1.0.1k-2_all.deb |
| Debian | 10 | all | openssl | < 1.0.1k-2 | openssl_1.0.1k-2_all.deb |
| Debian | 999 | all | openssl | < 1.0.1k-2 | openssl_1.0.1k-2_all.deb |
| Debian | 13 | all | openssl | < 1.0.1k-2 | openssl_1.0.1k-2_all.deb |
Related
nessus
nessus
Rockwell Automation Stratix OpenSSL Elliptic Curve d2i_ECPrivateKey Denial of Service (CVE-2015-0209)
2023-11-15 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K16323)
2015-10-06 00:00:00
OracleVM 3.3 : openssl (OVMSA-2015-0039)
2015-03-25 00:00:00
cve
cve
CVE-2015-0209
2015-03-19 22:59:00
f5
f5
K16323 : OpenSSL vulnerability CVE-2015-0209
2015-10-05 00:00:00
SOL16323 - OpenSSL vulnerability CVE-2015-0209
2015-03-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-10 02:08:47
Denial Of Service (DoS) Through Memory Corruption
2019-01-15 09:05:10
prion
prion
Design/Logic Flaw
2015-03-19 22:59:00
openssl
openssl
Vulnerability in OpenSSL CVE-2015-0209
2015-03-19 00:00:00
ubuntucve
ubuntucve
CVE-2015-0209
2015-03-17 00:00:00
openvas
openvas
F5 BIG-IP - OpenSSL vulnerability CVE-2015-0209
2015-10-07 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-498)
2015-09-08 00:00:00
Univention Corporate Server 4.0 erratum 142
2015-04-09 00:00:00
ibm
ibm
thn
thn
OpenSSL to Patch High Severity Vulnerability this Week
2015-03-17 22:30:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.2a-1.fc21
2015-05-04 15:27:35
[SECURITY] Fedora 22 Update: mingw-openssl-1.0.2a-1.fc22
2015-05-01 16:42:54
[SECURITY] Fedora 22 Update: openssl-1.0.1k-10.fc22
2015-06-21 00:19:25
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt3
2015-06-15 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt2
2015-03-19 00:00:00
debian
debian
[SECURITY] [DSA 3197-2] openssl regression update
2015-03-24 21:32:24
[SECURITY] [DSA 3197-1] openssl security update
2015-03-19 14:31:39
[SECURITY] [DSA 3197-2] openssl regression update
2015-03-24 21:32:24
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-03-19 19:47:16
osv
osv
openssl - security update
2015-03-19 00:00:00
openssl - regression update
2015-03-19 00:00:00
openssl - security update
2015-03-20 00:00:00
slackware
slackware
[slackware-security] openssl
2015-04-22 01:22:19
suse
suse
Security update for openssl (important)
2015-03-19 19:04:54
Security update for compat-openssl098 (important)
2015-03-20 13:04:51
Security update for compat-openssl098 (important)
2015-03-20 12:04:55
amazon
amazon
Medium: openssl
2015-03-23 13:42:00
redhat
redhat
(RHSA-2015:0752) Moderate: openssl security update
2015-03-30 00:00:00
(RHSA-2015:0715) Moderate: openssl security update
2015-03-23 00:00:00
(RHSA-2015:0716) Moderate: openssl security and bug fix update
2015-03-23 19:36:02
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-04-13 05:07:43
oraclelinux
oraclelinux
openssl security update
2015-03-23 00:00:00
openssl security update
2015-06-15 00:00:00
openssl security and bug fix update
2015-03-23 00:00:00
centos
centos
openssl security update
2015-03-23 20:40:40
openssl security update
2015-03-23 21:19:50
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-03-19 00:00:00
cloudfoundry
cloudfoundry
USN-2537-1: OpenSSL vulnerabilities | Cloud Foundry
2015-03-21 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:06.openssl
2015-03-19 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2015-03-19 00:00:00
archlinux
archlinux
lib32-openssl: multiple issues
2015-03-19 00:00:00
openssl: multiple issues
2015-03-19 00:00:00
fortinet
fortinet
OpenSSL vulnerabilities - March 2015
2015-03-24 00:00:00
securityvulns
securityvulns
[security bulletin] HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerabilities
2015-09-14 00:00:00
OpenSSL multiple security vulnerabilities
2015-03-21 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
2015-03-20 20:20:00
kaspersky
kaspersky
KLA10479 Multiple vulnerabilities in OpenSSL
2015-03-19 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-03-19 00:00:00
citrix
citrix
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.119 Low
EPSS
Percentile
95.3%
Related for DEBIANCVE:CVE-2015-0209