The vulnerability of the ASN1_TFLG_COMBINE implementation in the OpenSSL library allows a hacker to extract sensitive information from the process’ memory.

The vulnerability of the ASN1TFLGCOMBINE implementation crypto/asn1/tasndec.c in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain protected information from the process’s memory...

DEBIAN-CVE-2015-3195

The ASN1TFLGCOMBINE implementation in crypto/asn1/tasndec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by...