Lucene search
Ubuntu.comUB:CVE-2015-0205HistoryJan 08, 2015 - 12:00 a.m.
CVE-2015-0205
2015-01-0800:00:00
ubuntu.com
ubuntu.com
14
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.024 Low
EPSS
Percentile
89.7%
The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before
1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a
Diffie-Hellman (DH) certificate without requiring a CertificateVerify
message, which allows remote attackers to obtain access without knowledge
of a private key via crafted TLS Handshake Protocol traffic to a server
that recognizes a Certification Authority with DH support.
Notes
| Author | Note |
|---|---|
| mdeslaur | precise isn’t actually affected, as the code used to be wrong, resulting in a no-op, and having the same result as this security fix. See the following commit: https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=c2770c0e0e0da5f447227553c248f9a94504ee4e |
Related
veracode
veracode
Access Bypass
2017-02-10 01:42:04
prion
prion
Authentication flaw
2015-01-09 02:59:00
f5
f5
K16135 : OpenSSL vulnerability CVE-2015-0205
2015-09-16 00:00:00
SOL16135 - OpenSSL vulnerability CVE-2015-0205
2015-02-12 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (SOL16135)
2015-02-18 00:00:00
MS KB3062760: Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client (FREAK)
2015-06-09 00:00:00
Fedora 21 : openssl-1.0.1k-1.fc21 (2015-0512)
2015-01-13 00:00:00
cve
cve
CVE-2015-0205
2015-01-09 02:59:00
openssl
openssl
Vulnerability in OpenSSL CVE-2015-0205
2015-01-08 00:00:00
debiancve
debiancve
CVE-2015-0205
2015-01-09 02:59:00
openvas
openvas
OpenSSL Multiple Vulnerabilities (20150108 - 2) - Windows
2021-07-19 00:00:00
OpenSSL Multiple Vulnerabilities (20150108 - 2) - Linux
2021-07-19 00:00:00
Fedora Update for openssl FEDORA-2015-0512
2015-01-14 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 21 Update: openssl-1.0.1k-1.fc21
2015-01-13 00:02:20
[SECURITY] Fedora 20 Update: openssl-1.0.1e-41.fc20
2015-01-20 21:05:44
[SECURITY] Fedora 20 Update: openssl-1.0.1e-42.fc20
2015-03-23 07:18:26
centos
centos
openssl security update
2015-01-20 21:00:39
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-01-12 00:00:00
oraclelinux
oraclelinux
openssl security update
2015-01-20 00:00:00
openssl security update
2016-09-27 00:00:00
openssl security update
2021-04-01 00:00:00
redhat
redhat
(RHSA-2015:0066) Moderate: openssl security update
2015-01-20 00:00:00
securityvulns
securityvulns
[USN-2459-1] OpenSSL vulnerabilities
2015-01-13 00:00:00
OpenSSL multiple security vulnerabilities
2015-01-13 00:00:00
aix
aix
Multiple Security vulnerabilities in AIX OpenSSL
2015-02-04 06:24:41
kaspersky
kaspersky
KLA10460 Multiple vulnerabilities in OpenSSL
2015-01-08 00:00:00
slackware
slackware
[slackware-security] openssl
2015-01-09 18:34:39
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt1
2015-01-12 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt1
2015-01-12 00:00:00
suse
suse
Security update for openssl (important)
2015-01-23 20:05:13
Security update for libressl (important)
2015-07-22 15:08:14
Security update for compat-openssl097g (important)
2015-03-24 00:05:09
archlinux
archlinux
openssl: multiple issues
2015-01-09 00:00:00
debian
debian
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
[SECURITY] [DSA 3125-1] openssl security update
2015-01-11 11:05:13
osv
osv
openssl - security update
2015-01-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-15:01.openssl
2015-01-14 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
2015-03-10 16:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2015-01-08 00:00:00
amazon
amazon
Medium: openssl
2015-01-11 12:36:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-01-11 22:54:28
citrix
citrix
oracle
oracle
Oracle Critical Patch Update - April 2015
2015-04-14 00:00:00
Oracle Critical Patch Update Advisory - October 2015
2015-10-20 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.024 Low
EPSS
Percentile
89.7%
Related for UB:CVE-2015-0205