When verifying a signedData message the CMS code can enter an infinite loop if presented with an unknown hash function OID. This can be used to perform denial of service against any system which verifies signedData messages using the CMS code.

debiancve 1

cve 1

openvas 40

f5 2

prion 1

ubuntucve 1

ibm 49

veracode 2

nessus 39

slackware 1

archlinux 1

altlinux 5

osv 2

securityvulns 5

redhat 1

centos 1

fedora 4

mageia 1

cisco 1

debian 2

ubuntu 1

suse 10

fortinet 1

aix 1

freebsd_advisory 1

freebsd 1

paloalto 2

gentoo 1

oraclelinux 6

amazon 1

arista 1

symantec 1

citrix 1

ics 1

oracle 8

debiancve

CVE-2015-1792

2015-06-12 19:59:00

cve

CVE-2015-1792

2015-06-12 19:59:00

openvas

F5 BIG-IP - OpenSSL vulnerability CVE-2015-1792

2015-09-18 00:00:00

OpenSSL Multiple Vulnerabilities (20150611 - 2) - Linux

2015-12-01 00:00:00

OpenSSL Multiple Vulnerabilities (20150611 - 2) - Windows

2015-12-01 00:00:00

K16915 : OpenSSL vulnerability CVE-2015-1792

2015-07-07 00:00:00

SOL16915 - OpenSSL vulnerability CVE-2015-1792

2015-07-07 00:00:00

prion

Code injection

2015-06-12 19:59:00

ubuntucve

CVE-2015-1792

2015-06-11 00:00:00

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect Rational BuildForge (CVE-2015-1792)

2018-06-17 05:04:36

Security Bulletin: Vulnerabilities in OpenSSL affect IBM System Networking RackSwitch (CVE-2015-1788, CVE-2015-1789, CVE-2015-1792)

2019-01-31 02:10:01

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System Networking Switches (CVE-2015-1788, CVE-2015-1789, CVE-2015-1792)

2019-01-31 02:10:01

veracode

Denial Of Service (DoS)

2017-02-10 05:07:32

Denial Of Service (DoS)

2019-05-02 05:39:36

nessus

Fedora 22 : openssl-1.0.1k-10.fc22 (2015-10047)

2015-06-22 00:00:00

Fedora 21 : openssl-1.0.1k-10.fc21 (2015-10108)

2015-06-25 00:00:00

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssl (SSA:2015-162-01)

2015-06-12 00:00:00

slackware

[slackware-security] openssl

2015-06-11 23:01:09

archlinux

openssl: multiple issues

2015-06-12 00:00:00

altlinux

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt2.M70P.1

2015-06-26 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt3

2015-06-15 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1k-alt3

2015-06-15 00:00:00

osv

openssl - security update

2015-06-17 00:00:00

openssl - security update

2015-06-13 00:00:00

securityvulns

OpenSSL multiple security vulnerabilities

2015-06-13 00:00:00

[USN-2639-1] OpenSSL vulnerabilities

2015-06-13 00:00:00

[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities

2015-09-14 00:00:00

redhat

(RHSA-2015:1115) Moderate: openssl security update

2015-06-15 00:00:00

centos

openssl security update

2015-06-15 20:01:35

fedora

[SECURITY] Fedora 22 Update: openssl-1.0.1k-10.fc22

2015-06-21 00:19:25

[SECURITY] Fedora 22 Update: openssl-1.0.1k-11.fc22

2015-07-13 19:18:15

[SECURITY] Fedora 21 Update: openssl-1.0.1k-10.fc21

2015-06-24 15:57:49

mageia

Updated openssl package fixes security vulnerabilities

2015-06-19 16:33:05

cisco

Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products

2015-06-12 16:00:00

debian

[SECURITY] [DLA 247-1] openssl security update

2015-06-17 21:46:50

[SECURITY] [DSA 3287-1] openssl security update

2015-06-13 14:32:55

ubuntu

OpenSSL vulnerabilities

2015-06-11 00:00:00

suse

Security update for openssl (important)

2015-06-25 11:05:10

Security update for OpenSSL (important)

2015-07-03 14:06:19

Security update for OpenSSL (important)

2015-07-03 20:07:31

fortinet

OpenSSL vulnerabilities - June 2015

2015-06-11 00:00:00

aix

Multiple Security vulnerabilities in AIX OpenSSL

2015-07-15 00:20:05

freebsd_advisory

FreeBSD-SA-15:10.openssl

2015-06-12 00:00:00

freebsd

openssl -- multiple vulnerabilities

2015-06-11 00:00:00

paloalto

OpenSSL Vulnerabilities

2016-10-18 00:00:00

OpenSSL Vulnerabilities

2016-08-15 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2015-06-22 00:00:00

oraclelinux

openssl security update

2015-06-15 00:00:00

openssl security update

2015-12-14 00:00:00

openssl security update

2016-09-27 00:00:00

amazon

Medium: openssl

2015-06-16 11:29:00

arista

Security Advisory 0011

2015-06-17 00:00:00

symantec

SA98 : OpenSSL Security Advisory 11-June-2015

2015-06-17 08:00:00

citrix

Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Lights Out Management (LOM) firmware

2016-09-08 04:00:00

ics

Siemens SCALANCE X-200RNA Switch Devices

2022-12-19 12:00:00

oracle

Oracle Critical Patch Update Advisory - October 2015

2015-10-20 00:00:00

Oracle Critical Patch Update - July 2016

2016-07-19 00:00:00

Oracle Critical Patch Update - October 2016

2016-10-18 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.604 Medium

EPSS

Percentile

97.7%

JSON

Related for OPENSSL:CVE-2015-1792