Lucene search
FreeBSD9D15355B-CE7C-11E4-9DB0-D050992ECDE8HistoryMar 19, 2015 - 12:00 a.m.
OpenSSL -- multiple vulnerabilities
2015-03-1900:00:00
vuxml.freebsd.org
34
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.948 High
EPSS
Percentile
99.2%
OpenSSL project reports:
Reclassified: RSA silently downgrades to EXPORT_RSA
[Client] (CVE-2015-0204). OpenSSL only.
Segmentation fault in ASN1_TYPE_cmp (CVE-2015-0286)
ASN.1 structure reuse memory corruption (CVE-2015-0287)
PKCS#7 NULL pointer dereferences (CVE-2015-0289)
Base64 decode (CVE-2015-0292). OpenSSL only.
DoS via reachable assert in SSLv2 servers
(CVE-2015-0293). OpenSSL only.
Use After Free following d2i_ECPrivatekey error
(CVE-2015-0209)
X509_to_X509_REQ NULL pointer deref (CVE-2015-0288)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | openssl | = 1.0.1 | UNKNOWN |
| FreeBSD | any | noarch | openssl | < 1.0.1_19 | UNKNOWN |
| FreeBSD | any | noarch | mingw32-openssl | = 1.0.1 | UNKNOWN |
| FreeBSD | any | noarch | mingw32-openssl | < 1.0.1m | UNKNOWN |
| FreeBSD | any | noarch | linux-c6-openssl | < 1.0.1e_4 | UNKNOWN |
| FreeBSD | any | noarch | libressl | <= 2.1.5_1 | UNKNOWN |
| FreeBSD | any | noarch | freebsd | = 10.1 | UNKNOWN |
| FreeBSD | any | noarch | freebsd | < 10.1_8 | UNKNOWN |
References
Related
nessus
nessus
FreeBSD : OpenSSL -- multiple vulnerabilities (9d15355b-ce7c-11e4-9db0-d050992ecde8) (FREAK)
2015-03-20 00:00:00
Puppet Enterprise Multiple OpenSSL Vulnerabilities (FREAK)
2015-12-30 00:00:00
Oracle Linux 6 : openssl (ELSA-2015-0715)
2015-03-24 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:06.openssl
2015-03-19 00:00:00
cloudfoundry
cloudfoundry
USN-2537-1: OpenSSL vulnerabilities | Cloud Foundry
2015-03-21 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: openssl-1.0.1k-6.fc22
2015-03-22 04:41:05
[SECURITY] Fedora 21 Update: openssl-1.0.1k-6.fc21
2015-03-22 04:40:24
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.2a-1.fc21
2015-05-04 15:27:35
osv
osv
openssl - security update
2015-03-20 00:00:00
openssl - security update
2015-03-19 00:00:00
openssl - regression update
2015-03-19 00:00:00
centos
centos
openssl security update
2015-03-23 20:40:40
openssl security update
2015-03-23 21:19:50
openssl security update
2015-04-14 11:25:52
openvas
openvas
RedHat Update for openssl RHSA-2015:0715-01
2015-03-24 00:00:00
CentOS Update for openssl CESA-2015:0716 centos7
2015-04-01 00:00:00
Ubuntu: Security Advisory (USN-2537-1)
2015-03-20 00:00:00
oraclelinux
oraclelinux
openssl security update
2015-03-23 00:00:00
openssl security and bug fix update
2015-03-23 00:00:00
openssl security update
2015-04-13 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2015:0752) Moderate: openssl security update
2015-03-30 00:00:00
(RHSA-2015:0715) Moderate: openssl security update
2015-03-23 00:00:00
(RHSA-2015:0716) Moderate: openssl security and bug fix update
2015-03-23 19:36:02
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-04-13 05:07:43
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-03-19 00:00:00
debian
debian
[SECURITY] [DLA 177-1] openssl security update
2015-03-20 21:40:47
[SECURITY] [DSA 3197-1] openssl security update
2015-03-19 14:31:39
[SECURITY] [DSA 3197-2] openssl regression update
2015-03-24 21:32:24
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt2
2015-03-19 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.1k-alt2
2015-03-19 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-03-19 19:47:16
suse
suse
Security update for openssl (important)
2015-03-19 19:04:54
Security update for compat-openssl098 (important)
2015-03-20 13:04:51
Security update for compat-openssl098 (important)
2015-03-20 12:04:55
amazon
amazon
Medium: openssl
2015-03-23 13:42:00
slackware
slackware
[slackware-security] openssl
2015-04-22 01:22:19
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2015-03-21 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-03-19 00:00:00
kaspersky
kaspersky
KLA10479 Multiple vulnerabilities in OpenSSL
2015-03-19 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
2015-03-20 20:20:00
archlinux
archlinux
lib32-openssl: multiple issues
2015-03-19 00:00:00
openssl: multiple issues
2015-03-19 00:00:00
fortinet
fortinet
OpenSSL vulnerabilities - March 2015
2015-03-24 00:00:00
f5
f5
K16319 : OpenSSL vulnerability CVE-2015-0288
2015-04-11 00:00:00
SOL16319 - OpenSSL vulnerability CVE-2015-0288
2015-03-30 00:00:00
SOL16302 - OpenSSL vulnerability CVE-2015-0292
2015-03-20 00:00:00
thn
thn
OpenSSL to Patch High Severity Vulnerability this Week
2015-03-17 22:30:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.948 High
EPSS
Percentile
99.2%
Related for 9D15355B-CE7C-11E4-9DB0-D050992ECDE8