Denial Of Service (DoS) Through Null Pointer Dereference

🗓️ 10 Feb 2017 05:10:42Reported by Veracode Vulnerability DatabaseType

OpenSSL vulnerability to DoS attacks through invalid signature_algorithms extension in the ClientHello message during renegotiatio

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cisco MDS Switches and Directors.	11 Apr 202215:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM SAN b-type Switches	28 Feb 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-0287, CVE-2015-0289, CVE-2015-0292, and CVE-2015-0293)	8 Jun 202122:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL including ClientHello DoS affect Multiple N series Products	15 Dec 202118:04	–	ibm
Tenable Nessus	OpenSSL < 1.0.2a Multiple Vulnerabilities	19 Mar 201500:00	–	nessus
Tenable Nessus	OpenSSL 1.0.2 < 1.0.2a Multiple Vulnerabilities	27 Mar 201500:00	–	nessus
Tenable Nessus	GLSA-201503-11 : OpenSSL: Multiple vulnerabilities (FREAK)	24 Mar 201500:00	–	nessus
Tenable Nessus	HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)	29 Mar 201600:00	–	nessus
Tenable Nessus	HP System Management Homepage 7.3.x / 7.4.x < 7.5.0 Multiple Vulnerabilities (FREAK)	22 Jul 201500:00	–	nessus
Tenable Nessus	OpenSSL 1.0.2 < 1.0.2a Multiple Vulnerabilities	24 Mar 201500:00	–	nessus

Vulners

Node

Source	Link
openssl	www.openssl.org/news/secadv/20150319.txt
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.openssl.org/
securitytracker	www.securitytracker.com/id/1031929
securityfocus	www.securityfocus.com/bid/73235
security	www.security.gentoo.org/glsa/201503-11
marc	www.marc.info/
marc	www.marc.info/
marc	www.marc.info/
bto	www.bto.bluecoat.com/security-advisory/sa92

13 Dec 2022 13:44Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

EPSS0.28029