F5F5:K16124

HistorySep 16, 2015 - 12:00 a.m.

K16124 : OpenSSL vulnerability CVE-2015-0206

2015-09-1600:00:00

my.f5.com

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.925 High

EPSS

Percentile

98.8%

JSON

Security Advisory Description

Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection. (CVE-2015-0206)

Impact

Remote attackers may be able to cause a denial-of-service (DoS) by way of crafted Datagram Transport Layer Security (DTLS) packets.

CPENameOperatorVersion
big-ip afmeq11.3.0
big-ip afmeq11.4.0
big-ip afmeq11.4.1
big-ip afmeq11.5.0
big-ip afmeq11.5.1
big-ip afmeq11.5.2
big-ip afmeq11.5.3
big-ip afmeq11.6.0
big-ip afmeq12.0.0
big-ip analyticseq11.0.0

Name	Operator	Version
big-ip afm	eq	11.3.0
big-ip afm	eq	11.4.0
big-ip afm	eq	11.4.1
big-ip afm	eq	11.5.0
big-ip afm	eq	11.5.1
big-ip afm	eq	11.5.2
big-ip afm	eq	11.5.3
big-ip afm	eq	11.6.0
big-ip afm	eq	12.0.0
big-ip analytics	eq	11.0.0

Rows per page:

1-10 of 2061

checkpoint_advisories 1

veracode 1

openssl 1

cve 1

debiancve 1

nessus 34

prion 1

f5 1

ubuntucve 1

freebsd 2

openvas 24

fedora 3

ibm 35

ubuntu 1

centos 1

oraclelinux 5

redhat 1

securityvulns 6

aix 1

suse 3

altlinux 6

kaspersky 1

slackware 1

debian 2

archlinux 1

osv 1

freebsd_advisory 1

cisco 1

mageia 1

amazon 1

oracle 5

checkpoint_advisories

OpenSSL DTLS dtls1_buffer_record Denial of Service (CVE-2015-0206)

2015-01-19 00:00:00

veracode

Denial Of Service (DoS) Through Memory Consumption

2017-02-10 01:51:44

openssl

Vulnerability in OpenSSL CVE-2015-0206

2015-01-08 00:00:00

cve

CVE-2015-0206

2015-01-09 02:59:00

debiancve

CVE-2015-0206

2015-01-09 02:59:00

nessus

FreeBSD : LibreSSL -- DTLS vulnerability (f9c388c5-a256-11e4-992a-7b2a515a1247)

2015-01-23 00:00:00

Fedora 21 : openssl-1.0.1k-1.fc21 (2015-0512)

2015-01-13 00:00:00

Mac OS X : Cisco AnyConnect Secure Mobility Client < 3.1(7021) <= 4.0(48) Multiple Vulnerabilities (FREAK)

2015-03-26 00:00:00

prion

Memory corruption

2015-01-09 02:59:00

SOL16124 - OpenSSL vulnerability CVE-2015-0206

2015-02-12 00:00:00

ubuntucve

CVE-2015-0206

2015-01-08 00:00:00

freebsd

LibreSSL -- DTLS vulnerability

2015-01-08 00:00:00

OpenSSL -- multiple vulnerabilities

2015-01-08 00:00:00

openvas

OpenSSL Multiple Vulnerabilities (20150108 - 2) - Windows

2021-07-19 00:00:00

OpenSSL Multiple Vulnerabilities (20150108 - 2) - Linux

2021-07-19 00:00:00

Fedora Update for openssl FEDORA-2015-0512

2015-01-14 00:00:00

fedora

[SECURITY] Fedora 21 Update: openssl-1.0.1k-1.fc21

2015-01-13 00:02:20

[SECURITY] Fedora 20 Update: openssl-1.0.1e-41.fc20

2015-01-20 21:05:44

[SECURITY] Fedora 20 Update: openssl-1.0.1e-42.fc20

2015-03-23 07:18:26

ibm

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0206)

2018-06-17 14:56:42

Security Bulletin: Vulnerabilities in OpenSSL affects Rational Application Developer for WebSphere Software (CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0205, CVE-2015-0206)

2020-02-05 00:09:48

Security Bulletin: Vulnerabilities in OpenSSL affect Bluemix Workflow (CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-204, CVE-2015-205, CVE-2015-206)

2023-03-06 14:43:44

ubuntu

OpenSSL vulnerabilities

2015-01-12 00:00:00

centos

openssl security update

2015-01-20 21:00:39

oraclelinux

openssl security update

2015-01-20 00:00:00

openssl security update

2016-09-27 00:00:00

openssl security update

2021-04-01 00:00:00

redhat

(RHSA-2015:0066) Moderate: openssl security update

2015-01-20 00:00:00

securityvulns

[USN-2459-1] OpenSSL vulnerabilities

2015-01-13 00:00:00

OpenSSL multiple security vulnerabilities

2015-01-13 00:00:00

HP Version Control Repository Manager multiple security vulnerabilities

2015-09-14 00:00:00

aix

Multiple Security vulnerabilities in AIX OpenSSL

2015-02-04 06:24:41

suse

Security update for openssl (important)

2015-01-23 20:05:13

Security update for libressl (important)

2015-07-22 15:08:14

Security update for MySQL (important)

2015-05-26 15:04:53

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1

2015-01-12 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1

2015-01-12 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt1

2015-01-12 00:00:00

kaspersky

KLA10460 Multiple vulnerabilities in OpenSSL

2015-01-08 00:00:00

slackware

[slackware-security] openssl

2015-01-09 18:34:39

debian

[SECURITY] [DSA 3125-1] openssl security update

2015-01-11 11:05:13

[SECURITY] [DSA 3125-1] openssl security update

2015-01-11 11:05:13

archlinux

openssl: multiple issues

2015-01-09 00:00:00

osv

openssl - security update

2015-01-11 00:00:00

freebsd_advisory

FreeBSD-SA-15:01.openssl

2015-01-14 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products

2015-03-10 16:00:00

mageia

Updated openssl packages fix security vulnerabilities

2015-01-11 22:54:28

amazon

Medium: openssl

2015-01-11 12:36:00

oracle

Oracle Critical Patch Update - April 2015

2015-04-14 00:00:00

Oracle Critical Patch Update Advisory - October 2015

2015-10-20 00:00:00

Oracle Critical Patch Update Advisory - July 2015

2015-07-14 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.925 High

EPSS

Percentile

98.8%

JSON

Related for F5:K16124