CVE-2015-0291

🗓️ 19 Mar 2015 00:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 41 Views

The sigalgs implementation in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause denial of service by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cisco MDS Switches and Directors.	11 Apr 202215:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM SAN b-type Switches	28 Feb 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-0287, CVE-2015-0289, CVE-2015-0292, and CVE-2015-0293)	8 Jun 202122:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including ClientHello DoS affect Multiple N series Products	15 Dec 202118:04	–	ibm
Tenable Nessus	OpenSSL < 1.0.2a Multiple Vulnerabilities	19 Mar 201500:00	–	nessus
Tenable Nessus	OpenSSL 1.0.2 < 1.0.2a Multiple Vulnerabilities	27 Mar 201500:00	–	nessus
Tenable Nessus	GLSA-201503-11 : OpenSSL: Multiple vulnerabilities (FREAK)	24 Mar 201500:00	–	nessus
Tenable Nessus	HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)	29 Mar 201600:00	–	nessus
Tenable Nessus	HP System Management Homepage 7.3.x / 7.4.x < 7.5.0 Multiple Vulnerabilities (FREAK)	22 Jul 201500:00	–	nessus
Tenable Nessus	OpenSSL 1.0.2 < 1.0.2a Multiple Vulnerabilities	24 Mar 201500:00	–	nessus

OS	OS Version	Architecture	Package	Filename
Debian	11	any	openssl	openssl_0_any.deb
Debian	12	any	openssl	openssl_0_any.deb
Debian	13	any	openssl	openssl_0_any.deb
Debian	14	any	openssl	openssl_0_any.deb
Debian	999	any	openssl	openssl_0_any.deb

19 Mar 2015 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

EPSS0.08055