Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-3196HistoryDec 06, 2015 - 8:59 p.m.
CVE-2015-3196
2015-12-0620:59:00
Debian Security Bug Tracker
security-tracker.debian.org
9
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.039 Low
EPSS
Percentile
91.9%
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssl | < 1.0.2d-1 | openssl_1.0.2d-1_all.deb |
| Debian | 11 | all | openssl | < 1.0.2d-1 | openssl_1.0.2d-1_all.deb |
| Debian | 10 | all | openssl | < 1.0.2d-1 | openssl_1.0.2d-1_all.deb |
| Debian | 999 | all | openssl | < 1.0.2d-1 | openssl_1.0.2d-1_all.deb |
| Debian | 13 | all | openssl | < 1.0.2d-1 | openssl_1.0.2d-1_all.deb |
Related
prion
prion
Race condition
2015-12-06 20:59:00
f5
f5
K55540723 : OpenSSL vulnerability CVE-2015-3196
2015-12-04 00:00:00
SOL55540723 - OpenSSL vulnerability CVE-2015-3196
2015-12-04 00:00:00
veracode
veracode
Denial Of Service (DoS)
2017-02-10 01:05:59
openvas
openvas
OpenSSL DoS Vulnerability (20151203) - Windows
2016-01-11 00:00:00
OpenSSL DoS Vulnerability (20151203) - Linux
2016-01-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:2253-1)
2021-06-09 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2015-3196
2015-12-03 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K55540723)
2015-12-17 00:00:00
OpenSSL 1.0.1 < 1.0.1p Multiple Vulnerabilities
2015-07-09 00:00:00
OpenSSL 1.0.2 < 1.0.2d Multiple Vulnerabilities
2015-07-09 00:00:00
cve
cve
CVE-2015-3196
2015-12-06 20:59:00
ubuntucve
ubuntucve
CVE-2015-3196
2015-12-03 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in OpenSSL affects Sterling Connect:Enterprise for UNIX (CVE-2016-0800).
2019-12-18 01:14:08
aix
aix
Vulnerabilities in OpenSSL impact AIX
2016-01-18 10:47:32
amazon
amazon
Medium: openssl
2015-12-14 10:00:00
debian
debian
[SECURITY] [DSA 3413-1] openssl security update
2015-12-04 07:43:46
[SECURITY] [DSA 3413-1] openssl security update
2015-12-04 07:43:46
fedora
fedora
[SECURITY] Fedora 22 Update: openssl-1.0.1k-13.fc22
2015-12-14 11:54:41
osv
osv
openssl - security update
2015-12-04 00:00:00
centos
centos
openssl security update
2015-12-14 11:00:46
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:26.openssl
2015-12-06 00:00:00
redhat
redhat
(RHSA-2015:2617) Moderate: openssl security update
2015-12-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1q-alt1
2015-12-17 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1q-alt1
2015-12-17 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.1q-alt1
2015-12-17 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2015-12-05 13:03:58
symantec
symantec
SA105 : OpenSSL Vulnerabilities 3-Dec-2015
2015-12-10 08:00:00
freebsd
freebsd
openssl -- multiple vulnerabilities
2015-12-03 00:00:00
slackware
slackware
[slackware-security] openssl
2015-12-16 06:25:41
fortinet
fortinet
OpenSSL Advisory - December 2015
2015-12-10 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (December 2015) Affecting Cisco Products
2015-12-04 17:38:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-12-07 00:00:00
archlinux
archlinux
openssl lib32-openssl: multiple issues
2015-12-05 00:00:00
nodejsblog
nodejsblog
December Security Release Summary
2015-12-04 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-01-29 00:00:00
oraclelinux
oraclelinux
openssl security update
2016-03-01 00:00:00
openssl security update
2016-05-12 00:00:00
openssl security update
2016-05-09 00:00:00
suse
suse
Security update for sles12-docker-image (important)
2016-03-16 15:28:52
packetstorm
packetstorm
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
2017-07-14 00:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2016
2016-04-19 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.039 Low
EPSS
Percentile
91.9%
Related for DEBIANCVE:CVE-2015-3196