Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-1791HistoryJun 12, 2015 - 7:59 p.m.
CVE-2015-1791
2015-06-1219:59:00
Debian Security Bug Tracker
security-tracker.debian.org
29
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.471 Medium
EPSS
Percentile
97.4%
Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.2b-1 | openssl_1.0.2b-1_all.deb |
Related
prion
prion
Race condition
2015-06-12 19:59:00
ubuntucve
ubuntucve
CVE-2015-1791
2015-06-02 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K16914)
2015-09-18 00:00:00
Fedora 21 : openssl-1.0.1k-10.fc21 (2015-10108)
2015-06-25 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2015-1791
2015-06-02 00:00:00
f5
f5
K16914 : OpenSSL vulnerability CVE-2015-1791
2015-09-11 00:00:00
SOL16914 - OpenSSL vulnerability CVE-2015-1791
2015-07-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-10 06:46:32
Denial Of Service (DoS)
2019-05-02 05:39:36
cve
cve
CVE-2015-1791
2015-06-12 19:59:00
openvas
openvas
F5 BIG-IP - OpenSSL vulnerability CVE-2015-1791
2015-09-18 00:00:00
Cisco ASA Multiple OpenSSL Vulnerabilities (cisco-sa-20150612-openssl)
2015-11-25 00:00:00
OpenSSL Multiple Vulnerabilities (20150611 - 2) - Linux
2015-12-01 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest (CVE-2015-1788, CVE-2015-1789, CVE-2015-1791)
2018-06-17 05:04:24
slackware
slackware
[slackware-security] openssl
2015-06-11 23:01:09
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt3
2015-06-15 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt3
2015-06-15 00:00:00
redhat
redhat
(RHSA-2015:1115) Moderate: openssl security update
2015-06-15 00:00:00
osv
osv
openssl - security update
2015-06-17 00:00:00
openssl - security update
2015-06-13 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2015-06-13 00:00:00
[USN-2639-1] OpenSSL vulnerabilities
2015-06-13 00:00:00
centos
centos
openssl security update
2015-06-15 20:01:35
archlinux
archlinux
openssl: multiple issues
2015-06-12 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: openssl-1.0.1k-10.fc22
2015-06-21 00:19:25
[SECURITY] Fedora 22 Update: openssl-1.0.1k-11.fc22
2015-07-13 19:18:15
[SECURITY] Fedora 21 Update: openssl-1.0.1k-10.fc21
2015-06-24 15:57:49
mageia
mageia
Updated openssl package fixes security vulnerabilities
2015-06-19 16:33:05
cisco
cisco
Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products
2015-06-12 16:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-06-11 00:00:00
debian
debian
[SECURITY] [DLA 247-1] openssl security update
2015-06-17 21:46:50
[SECURITY] [DSA 3287-1] openssl security update
2015-06-13 14:32:55
suse
suse
Security update for compat-openssl098 (important)
2015-06-26 13:05:09
Security update for openssl (important)
2015-06-25 18:05:48
Security update for openssl (important)
2015-06-25 11:05:10
freebsd
freebsd
openssl -- multiple vulnerabilities
2015-06-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:10.openssl
2015-06-12 00:00:00
paloalto
paloalto
OpenSSL Vulnerabilities
2016-10-18 00:00:00
OpenSSL Vulnerabilities
2016-08-15 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-06-22 00:00:00
oraclelinux
oraclelinux
openssl security update
2015-06-15 00:00:00
openssl security update
2015-12-14 00:00:00
openssl security update
2016-09-27 00:00:00
amazon
amazon
Medium: openssl
2015-06-16 11:29:00
arista
arista
Security Advisory 0011
2015-06-17 00:00:00
fortinet
fortinet
OpenSSL vulnerabilities - June 2015
2015-06-11 00:00:00
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-07-15 00:20:05
symantec
symantec
SA98 : OpenSSL Security Advisory 11-June-2015
2015-06-17 08:00:00
citrix
citrix
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.471 Medium
EPSS
Percentile
97.4%
Related for DEBIANCVE:CVE-2015-1791