EUVD-2015-1914

🗓️ 12 Jun 2015 00:00:00Reported by EUVDType

OpenSSL versions before specified lack handling of malformed ECParameters, causing denial of service.

Reporter	Title	Published	Views	Family All 341
FreeBSD	openssl -- alternate chains certificate forgery vulnerability	9 Jul 201500:00	–	freebsd
FreeBSD	openssl -- multiple vulnerabilities	11 Jun 201500:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM® SDK for Node.js™ in IBM Bluemix (CVE-2015-1793)	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Sterling Connect:Express for UNIX (CVE-2015-4000, CVE-2014-8176, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)	24 Jul 202022:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Open Source OpenSSL affects the IBM FlashSystem models 840 and 900 (CVE-2015-1788, CVE-2015-1789, CVE-2015-1791, and CVE-2015-3216)	18 Feb 202301:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Security Network Protection	16 Jun 201821:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products	15 Dec 202118:05	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in GSKit affects IBM Security Network Protection (CVE-2015-1788)	16 Jun 201821:25	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Directory Server (CVE-2015-1788)	16 Jun 201821:44	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "ee4f7968-8226-3250-99bc-4c1a0935a635",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a9b9b900-1512-3ea2-a446-3de2d62f9fcc",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2015-1788.html
debian	www.debian.org/security/2015/dsa-3287
ubuntu	www.ubuntu.com/security/CVE-2015-1788
advisories	www.advisories.mageia.org/CVE-2015-1788.html
lists	www.lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html
marc	www.marc.info/
debian	www.debian.org/security/2015/dsa-3287
lists	www.lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html
kc	www.kc.mcafee.com/corporate/index
fortiguard	www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015

06 Aug 2024 04:54Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3 - 6.4

CVSS 36.5

EPSS0.76307