Debian Security Bug TrackerDEBIANCVE:CVE-2015-0287

HistoryMar 19, 2015 - 10:59 p.m.

CVE-2015-0287

2015-03-1922:59:00

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.03 Low

EPSS

Percentile

90.7%

JSON

The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssl< 1.0.1k-2openssl_1.0.1k-2_all.deb
Debian11allopenssl< 1.0.1k-2openssl_1.0.1k-2_all.deb
Debian10allopenssl< 1.0.1k-2openssl_1.0.1k-2_all.deb
Debian999allopenssl< 1.0.1k-2openssl_1.0.1k-2_all.deb
Debian13allopenssl< 1.0.1k-2openssl_1.0.1k-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssl	< 1.0.1k-2	openssl_1.0.1k-2_all.deb
Debian	11	all	openssl	< 1.0.1k-2	openssl_1.0.1k-2_all.deb
Debian	10	all	openssl	< 1.0.1k-2	openssl_1.0.1k-2_all.deb
Debian	999	all	openssl	< 1.0.1k-2	openssl_1.0.1k-2_all.deb
Debian	13	all	openssl	< 1.0.1k-2	openssl_1.0.1k-2_all.deb

f5 2

ubuntucve 1

veracode 1

nessus 58

prion 1

openssl 1

openvas 42

ibm 40

cve 1

fedora 6

altlinux 5

osv 3

debian 5

suse 6

slackware 1

amazon 1

mageia 1

centos 3

oraclelinux 4

redhat 4

ubuntu 1

aix 1

cloudfoundry 1

freebsd_advisory 1

freebsd 1

archlinux 2

fortinet 1

cisco 1

kaspersky 1

gentoo 1

securityvulns 1

citrix 1

K16318 : OpenSSL vulnerability CVE-2015-0287

2015-04-13 00:00:00

SOL16318 - OpenSSL vulnerability CVE-2015-0287

2015-04-03 00:00:00

ubuntucve

CVE-2015-0287

2015-03-17 00:00:00

veracode

Denial Of Service (DoS)

2017-02-10 02:59:11

nessus

Rockwell Automation Stratix OpenSSL ASN.1 Structure Reuse Memory Corruption (CVE-2015-0287)

2023-11-15 00:00:00

SUSE SLED12 / SLES12 Security Update : Recommended update for openssl (SUSE-SU-2015:1410-1)

2015-08-21 00:00:00

Amazon Linux AMI : openssl (ALAS-2015-498)

2015-03-25 00:00:00

prion

Memory corruption

2015-03-19 22:59:00

openssl

Vulnerability in OpenSSL CVE-2015-0287

2015-03-19 00:00:00

openvas

SUSE: Security Advisory (SUSE-SU-2015:1410-1)

2021-04-19 00:00:00

OpenSSL Multiple Vulnerabilities (20150319 - 3) - Linux

2015-11-26 00:00:00

Fedora Update for mingw-openssl FEDORA-2015-6951

2015-07-07 00:00:00

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect the IBM Tivoli Storage Manager Client and IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (CVE-2015-0287)

2018-06-17 15:16:15

Security Bulletin: A security vulnerability has been identified in the Tivoli Storage Manager Client shipped with IBM Tivoli Storage FlashCopy Manager for Windows (CVE-2015-0287)

2018-06-17 15:16:28

Security Bulletin: Vulnerabilities in OpenSSL affect IBM QRadar SIEM (CVE-2015-0286, CVE-2015-0287, CVE-2015-0289)

2018-06-16 21:23:31

cve

CVE-2015-0287

2015-03-19 22:59:00

fedora

[SECURITY] Fedora 22 Update: mingw-openssl-1.0.2a-1.fc22

2015-05-01 16:42:54

[SECURITY] Fedora 21 Update: mingw-openssl-1.0.2a-1.fc21

2015-05-04 15:27:35

[SECURITY] Fedora 22 Update: openssl-1.0.1k-6.fc22

2015-03-22 04:41:05

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt2

2015-03-19 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1.M70P.1

2015-03-20 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt2

2015-03-19 00:00:00

osv

openssl - security update

2015-03-19 00:00:00

openssl - regression update

2015-03-19 00:00:00

openssl - security update

2015-03-20 00:00:00

debian

[SECURITY] [DSA 3197-1] openssl security update

2015-03-19 14:31:39

[SECURITY] [DSA 3197-2] openssl regression update

2015-03-24 21:32:24

[SECURITY] [DSA 3197-2] openssl regression update

2015-03-24 21:32:24

suse

Security update for openssl (important)

2015-03-19 19:04:54

Security update for compat-openssl098 (important)

2015-03-20 13:04:51

Security update for compat-openssl098 (important)

2015-03-20 12:04:55

slackware

[slackware-security] openssl

2015-04-22 01:22:19

amazon

Medium: openssl

2015-03-23 13:42:00

mageia

Updated openssl packages fix security vulnerabilities

2015-03-19 19:47:16

centos

openssl security update

2015-03-23 20:40:40

openssl security update

2015-04-14 11:25:52

openssl security update

2015-03-23 21:19:50

oraclelinux

openssl security and bug fix update

2015-03-23 00:00:00

openssl security update

2015-03-23 00:00:00

openssl security update

2015-04-13 00:00:00

redhat

(RHSA-2015:0715) Moderate: openssl security update

2015-03-23 00:00:00

(RHSA-2015:0752) Moderate: openssl security update

2015-03-30 00:00:00

(RHSA-2015:0800) Moderate: openssl security update

2015-04-13 00:00:00

ubuntu

OpenSSL vulnerabilities

2015-03-19 00:00:00

aix

Multiple Security vulnerabilities in AIX OpenSSL

2015-04-13 05:07:43

cloudfoundry

USN-2537-1: OpenSSL vulnerabilities | Cloud Foundry

2015-03-21 00:00:00

freebsd_advisory

FreeBSD-SA-15:06.openssl

2015-03-19 00:00:00

freebsd

OpenSSL -- multiple vulnerabilities

2015-03-19 00:00:00

archlinux

lib32-openssl: multiple issues

2015-03-19 00:00:00

openssl: multiple issues

2015-03-19 00:00:00

fortinet

OpenSSL vulnerabilities - March 2015

2015-03-24 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products

2015-03-20 20:20:00

kaspersky

KLA10479 Multiple vulnerabilities in OpenSSL

2015-03-19 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2015-03-19 00:00:00

securityvulns

OpenSSL multiple security vulnerabilities

2015-03-21 00:00:00

citrix

Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Lights Out Management (LOM) firmware

2016-09-08 04:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.03 Low

EPSS

Percentile

90.7%

JSON

Related for DEBIANCVE:CVE-2015-0287