RHSA-2015:0066

Vulnerability from csaf_opensuse - Published: 2015-01-20 00:00 - Updated: 2026-09-20 10:53
Summary
security update for openssl
Severity
Moderate
Notes
Title of the patch: security update for openssl
Description of the patch: This security update provides a functional equivalent of RHSA-2015:0066. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:0066.
Patchnames: RHSA-2015:0066
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2014-3570
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2014-3571
Affected products
Recommended 8 products, the same list as for CVE-2014-3570
Threats
Impact moderate
CVE-2014-3572
Affected products
Recommended 8 products, the same list as for CVE-2014-3570
Threats
Impact moderate
CVE-2014-8275
Affected products
Recommended 8 products, the same list as for CVE-2014-3570
Threats
Impact moderate
CVE-2015-0204
Affected products
Recommended 8 products, the same list as for CVE-2014-3570
Threats
Impact moderate
CVE-2015-0205
Affected products
Recommended 8 products, the same list as for CVE-2014-3570
Threats
Impact moderate
CVE-2015-0206
Affected products
Recommended 8 products, the same list as for CVE-2014-3570
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2014-3570/ self
https://www.suse.com/security/cve/CVE-2014-3571/ self
https://www.suse.com/security/cve/CVE-2014-3572/ self
https://www.suse.com/security/cve/CVE-2014-8275/ self
https://www.suse.com/security/cve/CVE-2015-0204/ self
https://www.suse.com/security/cve/CVE-2015-0205/ self
https://www.suse.com/security/cve/CVE-2015-0206/ self
https://www.suse.com/security/cve/CVE-2014-3570 external
https://bugzilla.suse.com/912296 external
https://bugzilla.suse.com/915848 external
https://bugzilla.suse.com/927623 external
https://bugzilla.suse.com/937891 external
https://bugzilla.suse.com/944456 external
https://www.suse.com/security/cve/CVE-2014-3571 external
https://bugzilla.suse.com/912294 external
https://bugzilla.suse.com/915848 external
https://bugzilla.suse.com/927623 external
https://www.suse.com/security/cve/CVE-2014-3572 external
https://bugzilla.suse.com/912015 external
https://bugzilla.suse.com/915848 external
https://bugzilla.suse.com/927623 external
https://bugzilla.suse.com/937891 external
https://www.suse.com/security/cve/CVE-2014-8275 external
https://bugzilla.suse.com/912018 external
https://bugzilla.suse.com/915848 external
https://bugzilla.suse.com/927623 external
https://bugzilla.suse.com/937891 external
https://www.suse.com/security/cve/CVE-2015-0204 external
https://bugzilla.suse.com/1072727 external
https://bugzilla.suse.com/912014 external
https://bugzilla.suse.com/920482 external
https://bugzilla.suse.com/920484 external
https://bugzilla.suse.com/927591 external
https://bugzilla.suse.com/927623 external
https://bugzilla.suse.com/936787 external
https://bugzilla.suse.com/952088 external
https://www.suse.com/security/cve/CVE-2015-0205 external
https://bugzilla.suse.com/912293 external
https://bugzilla.suse.com/915848 external
https://bugzilla.suse.com/927623 external
https://bugzilla.suse.com/937891 external
https://www.suse.com/security/cve/CVE-2015-0206 external
https://bugzilla.suse.com/912292 external
https://bugzilla.suse.com/927623 external
https://bugzilla.suse.com/937891 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for openssl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:0066.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:0066.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:0066",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_0066.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3570 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3570/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3571 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3571/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-3572 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-3572/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8275 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8275/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0204 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0204/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0205 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0205/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0206 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0206/"
      }
    ],
    "title": "security update for openssl",
    "tracking": {
      "current_release_date": "2026-09-20T10:53:45Z",
      "generator": {
        "date": "2015-01-20T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:0066",
      "initial_release_date": "2015-01-20T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-01-20T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:53:45Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-devel-1:1.0.1e-34.el7_0.7.i686",
                "product": {
                  "name": "openssl-devel-1:1.0.1e-34.el7_0.7.i686",
                  "product_id": "openssl-devel-1:1.0.1e-34.el7_0.7.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssl-devel@1.0.1e-34.el7_0.7?arch=i686\u0026epoch=1\u0026upstream=openssl-1:1.0.1e-34.el7_0.7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-libs-1:1.0.1e-34.el7_0.7.i686",
                "product": {
                  "name": "openssl-libs-1:1.0.1e-34.el7_0.7.i686",
                  "product_id": "openssl-libs-1:1.0.1e-34.el7_0.7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-libs@1.0.1e-34.el7_0.7?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-static-1:1.0.1e-34.el7_0.7.i686",
                "product": {
                  "name": "openssl-static-1:1.0.1e-34.el7_0.7.i686",
                  "product_id": "openssl-static-1:1.0.1e-34.el7_0.7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-static@1.0.1e-34.el7_0.7?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-1:1.0.1e-34.el7_0.7.x86_64",
                "product": {
                  "name": "openssl-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_id": "openssl-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssl@1.0.1e-34.el7_0.7?arch=x86_64\u0026epoch=1\u0026upstream=openssl-1:1.0.1e-34.el7_0.7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
                "product": {
                  "name": "openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_id": "openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssl-devel@1.0.1e-34.el7_0.7?arch=x86_64\u0026epoch=1\u0026upstream=openssl-1:1.0.1e-34.el7_0.7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
                "product": {
                  "name": "openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_id": "openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-libs@1.0.1e-34.el7_0.7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
                "product": {
                  "name": "openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_id": "openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-perl@1.0.1e-34.el7_0.7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-static-1:1.0.1e-34.el7_0.7.x86_64",
                "product": {
                  "name": "openssl-static-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_id": "openssl-static-1:1.0.1e-34.el7_0.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-static@1.0.1e-34.el7_0.7?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1:1.0.1e-34.el7_0.7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64"
        },
        "product_reference": "openssl-1:1.0.1e-34.el7_0.7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-1:1.0.1e-34.el7_0.7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686"
        },
        "product_reference": "openssl-devel-1:1.0.1e-34.el7_0.7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-1:1.0.1e-34.el7_0.7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64"
        },
        "product_reference": "openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-libs-1:1.0.1e-34.el7_0.7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686"
        },
        "product_reference": "openssl-libs-1:1.0.1e-34.el7_0.7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-libs-1:1.0.1e-34.el7_0.7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64"
        },
        "product_reference": "openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-1:1.0.1e-34.el7_0.7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64"
        },
        "product_reference": "openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-static-1:1.0.1e-34.el7_0.7.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686"
        },
        "product_reference": "openssl-static-1:1.0.1e-34.el7_0.7.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-static-1:1.0.1e-34.el7_0.7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        },
        "product_reference": "openssl-static-1:1.0.1e-34.el7_0.7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-3570",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3570"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3570",
          "url": "https://www.suse.com/security/cve/CVE-2014-3570"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 912296 for CVE-2014-3570",
          "url": "https://bugzilla.suse.com/912296"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915848 for CVE-2014-3570",
          "url": "https://bugzilla.suse.com/915848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927623 for CVE-2014-3570",
          "url": "https://bugzilla.suse.com/927623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937891 for CVE-2014-3570",
          "url": "https://bugzilla.suse.com/937891"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 944456 for CVE-2014-3570",
          "url": "https://bugzilla.suse.com/944456"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3570"
    },
    {
      "cve": "CVE-2014-3571",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3571"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3571",
          "url": "https://www.suse.com/security/cve/CVE-2014-3571"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 912294 for CVE-2014-3571",
          "url": "https://bugzilla.suse.com/912294"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915848 for CVE-2014-3571",
          "url": "https://bugzilla.suse.com/915848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927623 for CVE-2014-3571",
          "url": "https://bugzilla.suse.com/927623"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3571"
    },
    {
      "cve": "CVE-2014-3572",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-3572"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-3572",
          "url": "https://www.suse.com/security/cve/CVE-2014-3572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 912015 for CVE-2014-3572",
          "url": "https://bugzilla.suse.com/912015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915848 for CVE-2014-3572",
          "url": "https://bugzilla.suse.com/915848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927623 for CVE-2014-3572",
          "url": "https://bugzilla.suse.com/927623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937891 for CVE-2014-3572",
          "url": "https://bugzilla.suse.com/937891"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-3572"
    },
    {
      "cve": "CVE-2014-8275",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8275"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate\u0027s unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8275",
          "url": "https://www.suse.com/security/cve/CVE-2014-8275"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 912018 for CVE-2014-8275",
          "url": "https://bugzilla.suse.com/912018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915848 for CVE-2014-8275",
          "url": "https://bugzilla.suse.com/915848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927623 for CVE-2014-8275",
          "url": "https://bugzilla.suse.com/927623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937891 for CVE-2014-8275",
          "url": "https://bugzilla.suse.com/937891"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8275"
    },
    {
      "cve": "CVE-2015-0204",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0204"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the \"FREAK\" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0204",
          "url": "https://www.suse.com/security/cve/CVE-2015-0204"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1072727 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/1072727"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 912014 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/912014"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 920482 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/920482"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 920484 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/920484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927591 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/927591"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927623 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/927623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 936787 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/936787"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 952088 for CVE-2015-0204",
          "url": "https://bugzilla.suse.com/952088"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0204"
    },
    {
      "cve": "CVE-2015-0205",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0205"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0205",
          "url": "https://www.suse.com/security/cve/CVE-2015-0205"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 912293 for CVE-2015-0205",
          "url": "https://bugzilla.suse.com/912293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 915848 for CVE-2015-0205",
          "url": "https://bugzilla.suse.com/915848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927623 for CVE-2015-0205",
          "url": "https://bugzilla.suse.com/927623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937891 for CVE-2015-0205",
          "url": "https://bugzilla.suse.com/937891"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0205"
    },
    {
      "cve": "CVE-2015-0206",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0206"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0206",
          "url": "https://www.suse.com/security/cve/CVE-2015-0206"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 912292 for CVE-2015-0206",
          "url": "https://bugzilla.suse.com/912292"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 927623 for CVE-2015-0206",
          "url": "https://bugzilla.suse.com/927623"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937891 for CVE-2015-0206",
          "url": "https://bugzilla.suse.com/937891"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-34.el7_0.7.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-34.el7_0.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-01-20T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0206"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.