Lucene search
OpenSSLOPENSSL:CVE-2015-0289HistoryMar 19, 2015 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2015-0289
2015-03-1900:00:00
www.openssl.org
25
6.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.021 Low
EPSS
Percentile
89.0%
PKCS#7 NULL pointer dereference. The PKCS#7 parsing code does not handle missing outer ContentInfo correctly. An attacker can craft malformed ASN.1-encoded PKCS#7 blobs with missing content and trigger a NULL pointer dereference on parsing. Applications that verify PKCS#7 signatures, decrypt PKCS#7 data or otherwise parse PKCS#7 structures from untrusted sources are affected. OpenSSL clients and servers are not affected.
Related
prion
prion
Null pointer dereference
2015-03-19 22:59:00
debiancve
debiancve
CVE-2015-0289
2015-03-19 22:59:00
f5
f5
K16320 : OpenSSL vulnerability CVE-2015-0289
2015-04-10 00:00:00
SOL16320 - OpenSSL vulnerability CVE-2015-0289
2015-03-30 00:00:00
K16319 : OpenSSL vulnerability CVE-2015-0288
2015-04-11 00:00:00
ubuntucve
ubuntucve
CVE-2015-0289
2015-03-17 00:00:00
veracode
veracode
Null Pointer Dereference
2017-02-10 04:55:21
nessus
nessus
Rockwell Automation Stratix OpenSSL PKCS7 NULL Pointer Dereference Denial of Service (CVE-2015-0289)
2023-11-15 00:00:00
EulerOS 2.0 SP3 : openssl098e (EulerOS-SA-2020-2076)
2020-09-28 00:00:00
EulerOS Virtualization 3.0.6.0 : openssl098e (EulerOS-SA-2020-1774)
2020-07-01 00:00:00
cve
cve
CVE-2015-0289
2015-03-19 22:59:00
ibm
ibm
openvas
openvas
Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2020-2076)
2020-09-29 00:00:00
OpenSSL Multiple Vulnerabilities (20150319 - 3) - Linux
2015-11-26 00:00:00
Fedora Update for mingw-openssl FEDORA-2015-6951
2015-07-07 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-openssl-1.0.2a-1.fc22
2015-05-01 16:42:54
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.2a-1.fc21
2015-05-04 15:27:35
[SECURITY] Fedora 22 Update: openssl-1.0.1k-6.fc22
2015-03-22 04:41:05
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt2
2015-03-19 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt2
2015-03-19 00:00:00
osv
osv
openssl - security update
2015-03-19 00:00:00
openssl - regression update
2015-03-19 00:00:00
openssl - security update
2015-03-20 00:00:00
debian
debian
[SECURITY] [DSA 3197-1] openssl security update
2015-03-19 14:31:39
[SECURITY] [DSA 3197-2] openssl regression update
2015-03-24 21:32:24
[SECURITY] [DSA 3197-2] openssl regression update
2015-03-24 21:32:24
amazon
amazon
Medium: openssl
2015-03-23 13:42:00
slackware
slackware
[slackware-security] openssl
2015-04-22 01:22:19
suse
suse
Security update for openssl (important)
2015-03-19 19:04:54
Security update for compat-openssl098 (important)
2015-03-20 13:04:51
Security update for compat-openssl098 (important)
2015-03-20 12:04:55
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-03-19 19:47:16
centos
centos
openssl security update
2015-03-23 20:40:40
openssl security update
2015-04-14 11:25:52
openssl security update
2015-03-23 21:19:50
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-03-19 00:00:00
oraclelinux
oraclelinux
openssl security and bug fix update
2015-03-23 00:00:00
openssl security update
2015-03-23 00:00:00
openssl security update
2015-04-13 00:00:00
redhat
redhat
(RHSA-2015:0715) Moderate: openssl security update
2015-03-23 00:00:00
(RHSA-2015:0752) Moderate: openssl security update
2015-03-30 00:00:00
(RHSA-2015:0800) Moderate: openssl security update
2015-04-13 00:00:00
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-04-13 05:07:43
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:06.openssl
2015-03-19 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2015-03-19 00:00:00
cloudfoundry
cloudfoundry
USN-2537-1: OpenSSL vulnerabilities | Cloud Foundry
2015-03-21 00:00:00
archlinux
archlinux
lib32-openssl: multiple issues
2015-03-19 00:00:00
openssl: multiple issues
2015-03-19 00:00:00
kaspersky
kaspersky
KLA10479 Multiple vulnerabilities in OpenSSL
2015-03-19 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (March 2015) Affecting Cisco Products
2015-03-20 20:20:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2015-03-19 00:00:00
securityvulns
securityvulns
OpenSSL multiple security vulnerabilities
2015-03-21 00:00:00
6.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.021 Low
EPSS
Percentile
89.0%
Related for OPENSSL:CVE-2015-0289