Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-0292HistoryMar 19, 2015 - 10:59 p.m.
CVE-2015-0292
2015-03-1922:59:00
Debian Security Bug Tracker
security-tracker.debian.org
25
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.221 Low
EPSS
Percentile
96.4%
Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.1h-1 | openssl_1.0.1h-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.1h-1 | openssl_1.0.1h-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.1h-1 | openssl_1.0.1h-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.1h-1 | openssl_1.0.1h-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.1h-1 | openssl_1.0.1h-1_all.deb |
Related
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (SOL16302)
2016-01-28 00:00:00
Rockwell Automation Stratix OpenSSL Base64 Decoding Memory Corruption (CVE-2015-0292)
2023-11-15 00:00:00
EulerOS Virtualization 3.0.6.0 : openssl098e (EulerOS-SA-2020-1774)
2020-07-01 00:00:00
f5
f5
SOL16302 - OpenSSL vulnerability CVE-2015-0292
2015-03-20 00:00:00
K16302 : OpenSSL vulnerability CVE-2015-0292
2015-09-10 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2015-0292
2015-03-19 00:00:00
ubuntucve
ubuntucve
CVE-2015-0292
2015-03-17 00:00:00
openvas
openvas
OpenSSL DoS Vulnerability (20150319 - 1) - Windows
2015-11-24 00:00:00
OpenSSL DoS Vulnerability (20150319 - 1) - Linux
2015-11-24 00:00:00
Univention Corporate Server 4.0 erratum 142
2015-04-09 00:00:00
prion
prion
Integer overflow
2015-03-19 22:59:00
Integer overflow
2015-08-20 10:59:00
veracode
veracode
Denial Of Service (DoS) Through Memory Corruption
2017-02-10 05:31:03
cve
cve
CVE-2015-0292
2015-03-19 22:59:00
CVE-2015-0537
2015-08-20 10:59:00
ibm
ibm
osv
osv
openssl - security update
2015-03-19 00:00:00
openssl - regression update
2015-03-19 00:00:00
openssl - security update
2015-03-20 00:00:00
debian
debian
[SECURITY] [DSA 3197-1] openssl security update
2015-03-19 14:31:39
[SECURITY] [DSA 3197-2] openssl regression update
2015-03-24 21:32:24
[SECURITY] [DSA 3197-1] openssl security update
2015-03-19 14:31:39
fedora
fedora
[SECURITY] Fedora 22 Update: openssl-1.0.1k-6.fc22
2015-03-22 04:41:05
[SECURITY] Fedora 21 Update: openssl-1.0.1k-6.fc21
2015-03-22 04:40:24
[SECURITY] Fedora 20 Update: openssl-1.0.1e-42.fc20
2015-03-23 07:18:26
centos
centos
openssl security update
2015-03-23 20:40:40
openssl security update
2015-04-14 11:25:52
openssl security update
2015-03-23 21:19:50
redhat
redhat
(RHSA-2015:0752) Moderate: openssl security update
2015-03-30 00:00:00
(RHSA-2015:0715) Moderate: openssl security update
2015-03-23 00:00:00
(RHSA-2015:0716) Moderate: openssl security and bug fix update
2015-03-23 19:36:02
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-04-13 05:07:43
oraclelinux
oraclelinux
openssl security update
2015-03-23 00:00:00
openssl security and bug fix update
2015-03-23 00:00:00
openssl security update
2015-04-13 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-03-19 00:00:00
amazon
amazon
Important: openssl
2014-06-04 15:45:00
cloudfoundry
cloudfoundry
USN-2537-1: OpenSSL vulnerabilities | Cloud Foundry
2015-03-21 00:00:00
suse
suse
Security update for compat-openssl098 (important)
2015-03-20 13:04:51
Security update for compat-openssl098 (important)
2015-03-20 12:04:55
Security update for compat-openssl097g (important)
2015-03-24 00:05:09
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:06.openssl
2015-03-19 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2015-03-19 00:00:00
securityvulns
securityvulns
fortinet
fortinet
OpenSSL vulnerabilities - March 2015
2015-03-24 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
2015-03-20 20:20:00
kaspersky
kaspersky
KLA10479 Multiple vulnerabilities in OpenSSL
2015-03-19 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-03-19 00:00:00
citrix
citrix
ics
ics
Rockwell Automation Stratix 5900
2017-05-10 12:00:00
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
Oracle Critical Patch Update - January 2016
2016-01-19 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.221 Low
EPSS
Percentile
96.4%
Related for DEBIANCVE:CVE-2015-0292