[Forgot Password]
Login  Register Subscribe

23631

 
 

115083

 
 

97389

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2015-0292

Date: (C)2015-03-30   (M)2017-11-15
 
CVSS Score: 7.5Access Vector: NETWORK
Exploitability Subscore: 10.0Access Complexity: LOW
Impact Subscore: 6.4Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: PARTIAL
 Availability: PARTIAL











Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.

Reference:
SECTRACK-1031929
BID-73228
DSA-3197
FEDORA-2015-4300
FEDORA-2015-4303
FEDORA-2015-4320
GLSA-201503-11
HPSBMU03380
HPSBMU03397
HPSBMU03409
RHSA-2015:0715
RHSA-2015:0716
RHSA-2015:0752
RHSA-2015:0800
SSRT102000
SUSE-SU-2015:0578
USN-2537-1
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680
http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
https://access.redhat.com/articles/1384453
https://bto.bluecoat.com/security-advisory/sa92
https://bugzilla.redhat.com/show_bug.cgi?id=1202395
https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=d0666f289ac013094bbbf547bfbcd616199b7d2d
https://kc.mcafee.com/corporate/index?page=content&id=SB10110
https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest
https://support.citrix.com/article/CTX216642
https://www.openssl.org/news/secadv_20150319.txt

CPE    22
cpe:/a:openssl:openssl:1.0.0h
cpe:/a:openssl:openssl:1.0.0g
cpe:/a:openssl:openssl:1.0.0j
cpe:/a:openssl:openssl:1.0.0i
...
CWE    1
CWE-119
OVAL    19
oval:org.secpod.oval:def:108526
oval:org.secpod.oval:def:24117
oval:org.secpod.oval:def:203581
oval:org.secpod.oval:def:501541
...

© 2013 SecPod Technologies