Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1788HistoryJun 12, 2015 - 7:59 p.m.
CVE-2015-1788
2015-06-1219:59:00
Debian Security Bug Tracker
security-tracker.debian.org
19
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.578 Medium
EPSS
Percentile
97.7%
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
Related
ibm
ibm
f5
f5
K16938 : OpenSSL vulnerability CVE-2015-1788
2015-11-10 00:00:00
SOL16938 - OpenSSL vulnerability CVE-2015-1788
2015-07-08 00:00:00
openvas
openvas
OpenSSL Denial of Service Vulnerability (20150611 - 1) - Windows
2015-12-01 00:00:00
OpenSSL Denial of Service Vulnerability (20150611 - 1) - Linux
2015-12-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1181-2)
2021-06-09 00:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Authentication flaw
2015-06-12 19:59:00
cve
cve
CVE-2015-1788
2015-06-12 19:59:00
openssl
openssl
Vulnerability in OpenSSL CVE-2015-1788
2015-06-11 00:00:00
hackerone
hackerone
Internet Bug Bounty: Malformed ECParameters causes infinite loop
2015-06-11 00:00:00
nessus
nessus
IBM HTTP Server 8.0.0.0 <= 8.0.0.11 / 8.5.0.0 <= 8.5.5.6 (533837)
2021-01-06 00:00:00
Nessus 5.x < 5.2.12 / 6.x < 6.4 Multiple OpenSSL Vulnerabilities
2015-11-19 00:00:00
SUSE SLES10 Security Update : OpenSSL (SUSE-SU-2015:1181-2) (Logjam)
2015-07-07 00:00:00
veracode
veracode
Denial Of Service (DoS) Through An Infinite Loop
2017-02-10 05:44:00
ubuntucve
ubuntucve
CVE-2015-1788
2015-06-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1q-alt1
2015-12-17 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1q-alt1
2015-12-17 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1q-alt1
2015-12-17 00:00:00
suse
suse
Security update for OpenSSL (important)
2015-07-03 14:05:21
Security update for OpenSSL (important)
2015-07-03 20:06:29
Security update for openssl (important)
2015-06-25 11:05:10
slackware
slackware
[slackware-security] openssl
2015-06-11 23:01:09
archlinux
archlinux
openssl: multiple issues
2015-06-12 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2015-06-13 00:00:00
[USN-2639-1] OpenSSL vulnerabilities
2015-06-13 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products
2015-06-12 16:00:00
mageia
mageia
Updated openssl package fixes security vulnerabilities
2015-06-19 16:33:05
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-06-11 00:00:00
freebsd
freebsd
openssl -- multiple vulnerabilities
2015-06-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:10.openssl
2015-06-12 00:00:00
paloalto
paloalto
OpenSSL Vulnerabilities
2016-10-18 00:00:00
OpenSSL Vulnerabilities
2016-08-15 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-06-22 00:00:00
arista
arista
Security Advisory 0011
2015-06-17 00:00:00
fortinet
fortinet
OpenSSL vulnerabilities - June 2015
2015-06-11 00:00:00
debian
debian
[SECURITY] [DSA 3287-1] openssl security update
2015-06-13 14:32:55
osv
osv
openssl - security update
2015-06-13 00:00:00
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-07-15 00:20:05
symantec
symantec
SA98 : OpenSSL Security Advisory 11-June-2015
2015-06-17 08:00:00
citrix
citrix
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.578 Medium
EPSS
Percentile
97.7%
Related for DEBIANCVE:CVE-2015-1788