When presented with a malformed X509_ATTRIBUTE structure OpenSSL will leak memory. This structure is used by the PKCS#7 and CMS routines so any application which reads PKCS#7 or CMS data from untrusted sources is affected. SSL/TLS is not affected.

nessus 53

openvas 30

veracode 2

osv 2

debian 3

f5 3

centos 2

ubuntucve 1

redhat 3

cve 1

debiancve 1

ibm 62

prion 1

cloudfoundry 1

fedora 2

amazon 1

aix 1

freebsd_advisory 1

kaspersky 1

altlinux 4

oraclelinux 6

mageia 1

ubuntu 1

symantec 1

slackware 1

freebsd 1

fortinet 1

cisco 1

archlinux 1

nodejsblog 1

gentoo 1

suse 4

paloalto 1

packetstorm 1

apple 2

nessus

RHEL 5 : openssl (RHSA-2015:2616)

2015-12-14 00:00:00

F5 Networks BIG-IP : OpenSSL vulnerability (K12824341)

2016-05-18 00:00:00

SUSE SLED11 / SLES11 Security Update : openssl (SUSE-SU-2015:2275-1)

2015-12-17 00:00:00

openvas

CentOS Update for openssl CESA-2015:2616 centos5

2015-12-15 00:00:00

OpenSSL 'X509_ATTRIBUTE' Information Disclosure Vulnerability (Linux)

2015-12-23 00:00:00

RedHat Update for openssl RHSA-2015:2616-01

2015-12-15 00:00:00

veracode

Denial Of Service (DoS)

2019-01-15 09:09:10

Denial Of Service (DoS)

2017-02-10 01:19:05

osv

openssl - security update

2015-12-03 00:00:00

openssl - security update

2015-12-04 00:00:00

debian

[SECURITY] [DLA 358-1] openssl security update

2015-12-03 22:20:02

[SECURITY] [DSA 3413-1] openssl security update

2015-12-04 07:43:46

[SECURITY] [DSA 3413-1] openssl security update

2015-12-04 07:43:46

SOL12824341 - OpenSSL vulnerability CVE-2015-3195

2015-12-04 00:00:00

K12824341 : OpenSSL vulnerability CVE-2015-3195

2015-12-04 00:00:00

SOL90542710 - OpenSSL vulnerabilities CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, and CVE-2015-1794

2015-12-03 00:00:00

centos

openssl security update

2015-12-14 23:02:16

openssl security update

2015-12-14 11:00:46

ubuntucve

CVE-2015-3195

2015-12-03 00:00:00

redhat

(RHSA-2015:2616) Moderate: openssl security update

2015-12-14 00:00:00

(RHSA-2015:2617) Moderate: openssl security update

2015-12-14 00:00:00

(RHSA-2016:2957) Important: Red Hat JBoss Core Services Apache HTTP 2.4.23 Release

2016-12-15 22:02:12

cve

CVE-2015-3195

2015-12-06 20:59:00

debiancve

CVE-2015-3195

2015-12-06 20:59:00

ibm

Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Management Module (IMM) (CVE-2015-3195)

2023-04-14 14:32:25

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos Controller (CVE-2015-3195)

2018-06-15 22:42:18

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sterling Connect:Direct for UNIX (CVE-2015-3194, CVE-2015-3195).

2020-07-24 22:19:08

prion

Information disclosure

2015-12-06 20:59:00

cloudfoundry

USN-2830-1 OpenSSL vulnerability | Cloud Foundry

2016-01-07 00:00:00

fedora

[SECURITY] Fedora 22 Update: openssl-1.0.1k-13.fc22

2015-12-14 11:54:41

[SECURITY] Fedora 23 Update: openssl-1.0.2e-1.fc23

2015-12-06 19:20:38

amazon

Medium: openssl

2015-12-14 10:00:00

aix

Vulnerabilities in OpenSSL impact AIX

2016-01-18 10:47:32

freebsd_advisory

FreeBSD-SA-15:26.openssl

2015-12-06 00:00:00

kaspersky

KLA10798 Multiple vulnerabilities at Oracle VM VirtualBox

2016-04-19 00:00:00

altlinux

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1q-alt1

2015-12-17 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1q-alt1

2015-12-17 00:00:00

Security fix for the ALT Linux 8 package openssl10 version 1.0.1q-alt1

2015-12-17 00:00:00

oraclelinux

openssl security update

2015-12-14 00:00:00

openssl security update

2016-03-01 00:00:00

openssl security update

2016-05-12 00:00:00

mageia

Updated openssl packages fix security vulnerability

2015-12-05 13:03:58

ubuntu

OpenSSL vulnerabilities

2015-12-07 00:00:00

symantec

SA105 : OpenSSL Vulnerabilities 3-Dec-2015

2015-12-10 08:00:00

slackware

[slackware-security] openssl

2015-12-16 06:25:41

freebsd

openssl -- multiple vulnerabilities

2015-12-03 00:00:00

fortinet

OpenSSL Advisory - December 2015

2015-12-10 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL (December 2015) Affecting Cisco Products

2015-12-04 17:38:00

archlinux

openssl lib32-openssl: multiple issues

2015-12-05 00:00:00

nodejsblog

December Security Release Summary

2015-12-04 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2016-01-29 00:00:00

suse

Security update for OpenSSL (important)

2016-03-07 18:13:37

Security update for openssl (important)

2016-03-02 23:12:04

Security update for sles12-docker-image (important)

2016-03-16 15:28:52

paloalto

OpenSSL Vulnerabilities

2016-08-15 00:00:00

packetstorm

Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle

2017-07-14 00:00:00

apple

About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002 - Apple Support

2017-01-23 03:54:34

About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002

2016-03-21 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6.4 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

87.2%

JSON

Related for OPENSSL:CVE-2015-3195