RHSA-2015:1115

Vulnerability from csaf_opensuse - Published: 2015-06-15 00:00 - Updated: 2026-09-20 10:54
Summary
security update for openssl
Severity
Moderate
Notes
Title of the patch: security update for openssl
Description of the patch: This security update provides a functional equivalent of RHSA-2015:1115. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2015:1115.
Patchnames: RHSA-2015:1115
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2014-8176
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2015-1789
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 8 products, the same list as for CVE-2014-8176
Threats
Impact moderate
CVE-2015-1790
Affected products
Recommended 8 products, the same list as for CVE-2014-8176
Threats
Impact moderate
CVE-2015-1791
Affected products
Recommended 8 products, the same list as for CVE-2014-8176
Threats
Impact moderate
CVE-2015-1792
Affected products
Recommended 8 products, the same list as for CVE-2014-8176
Threats
Impact moderate
CVE-2015-3216
Affected products
Recommended 8 products, the same list as for CVE-2014-8176
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/r… self
https://www.suse.com/security/cve/CVE-2014-8176/ self
https://www.suse.com/security/cve/CVE-2015-1789/ self
https://www.suse.com/security/cve/CVE-2015-1790/ self
https://www.suse.com/security/cve/CVE-2015-1791/ self
https://www.suse.com/security/cve/CVE-2015-1792/ self
https://www.suse.com/security/cve/CVE-2015-3216/ self
https://www.suse.com/security/cve/CVE-2014-8176 external
https://bugzilla.suse.com/1148697 external
https://bugzilla.suse.com/934494 external
https://bugzilla.suse.com/934666 external
https://bugzilla.suse.com/986238 external
https://www.suse.com/security/cve/CVE-2015-1789 external
https://bugzilla.suse.com/934489 external
https://bugzilla.suse.com/934666 external
https://bugzilla.suse.com/936586 external
https://bugzilla.suse.com/937891 external
https://bugzilla.suse.com/938432 external
https://bugzilla.suse.com/951391 external
https://www.suse.com/security/cve/CVE-2015-1790 external
https://bugzilla.suse.com/934491 external
https://bugzilla.suse.com/934666 external
https://bugzilla.suse.com/936586 external
https://bugzilla.suse.com/938432 external
https://www.suse.com/security/cve/CVE-2015-1791 external
https://bugzilla.suse.com/933911 external
https://bugzilla.suse.com/934666 external
https://bugzilla.suse.com/986238 external
https://bugzilla.suse.com/989464 external
https://www.suse.com/security/cve/CVE-2015-1792 external
https://bugzilla.suse.com/934493 external
https://bugzilla.suse.com/934666 external
https://bugzilla.suse.com/937891 external
https://bugzilla.suse.com/986238 external
https://www.suse.com/security/cve/CVE-2015-3216 external
https://bugzilla.suse.com/933898 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for openssl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2015:1115.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2015:1115.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2015:1115",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_1115.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8176 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8176/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1789 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1789/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1790 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1790/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1791 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1791/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1792 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3216 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3216/"
      }
    ],
    "title": "security update for openssl",
    "tracking": {
      "current_release_date": "2026-09-20T10:54:25Z",
      "generator": {
        "date": "2015-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2015:1115",
      "initial_release_date": "2015-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2015-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T10:54:25Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-devel-1:1.0.1e-42.el7_1.8.i686",
                "product": {
                  "name": "openssl-devel-1:1.0.1e-42.el7_1.8.i686",
                  "product_id": "openssl-devel-1:1.0.1e-42.el7_1.8.i686",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssl-devel@1.0.1e-42.el7_1.8?arch=i686\u0026epoch=1\u0026upstream=openssl-1:1.0.1e-42.el7_1.8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-libs-1:1.0.1e-42.el7_1.8.i686",
                "product": {
                  "name": "openssl-libs-1:1.0.1e-42.el7_1.8.i686",
                  "product_id": "openssl-libs-1:1.0.1e-42.el7_1.8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-libs@1.0.1e-42.el7_1.8?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-static-1:1.0.1e-42.el7_1.8.i686",
                "product": {
                  "name": "openssl-static-1:1.0.1e-42.el7_1.8.i686",
                  "product_id": "openssl-static-1:1.0.1e-42.el7_1.8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-static@1.0.1e-42.el7_1.8?arch=i686\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-1:1.0.1e-42.el7_1.8.x86_64",
                "product": {
                  "name": "openssl-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_id": "openssl-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssl@1.0.1e-42.el7_1.8?arch=x86_64\u0026epoch=1\u0026upstream=openssl-1:1.0.1e-42.el7_1.8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
                "product": {
                  "name": "openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_id": "openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/openssl-devel@1.0.1e-42.el7_1.8?arch=x86_64\u0026epoch=1\u0026upstream=openssl-1:1.0.1e-42.el7_1.8.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
                "product": {
                  "name": "openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_id": "openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-libs@1.0.1e-42.el7_1.8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
                "product": {
                  "name": "openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_id": "openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-perl@1.0.1e-42.el7_1.8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "openssl-static-1:1.0.1e-42.el7_1.8.x86_64",
                "product": {
                  "name": "openssl-static-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_id": "openssl-static-1:1.0.1e-42.el7_1.8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/openssl-static@1.0.1e-42.el7_1.8?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1:1.0.1e-42.el7_1.8.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64"
        },
        "product_reference": "openssl-1:1.0.1e-42.el7_1.8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-1:1.0.1e-42.el7_1.8.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686"
        },
        "product_reference": "openssl-devel-1:1.0.1e-42.el7_1.8.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-devel-1:1.0.1e-42.el7_1.8.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64"
        },
        "product_reference": "openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-libs-1:1.0.1e-42.el7_1.8.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686"
        },
        "product_reference": "openssl-libs-1:1.0.1e-42.el7_1.8.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-libs-1:1.0.1e-42.el7_1.8.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64"
        },
        "product_reference": "openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-perl-1:1.0.1e-42.el7_1.8.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64"
        },
        "product_reference": "openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-static-1:1.0.1e-42.el7_1.8.i686 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686"
        },
        "product_reference": "openssl-static-1:1.0.1e-42.el7_1.8.i686",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-static-1:1.0.1e-42.el7_1.8.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
        },
        "product_reference": "openssl-static-1:1.0.1e-42.el7_1.8.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-8176",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8176"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8176",
          "url": "https://www.suse.com/security/cve/CVE-2014-8176"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148697 for CVE-2014-8176",
          "url": "https://bugzilla.suse.com/1148697"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934494 for CVE-2014-8176",
          "url": "https://bugzilla.suse.com/934494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934666 for CVE-2014-8176",
          "url": "https://bugzilla.suse.com/934666"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 986238 for CVE-2014-8176",
          "url": "https://bugzilla.suse.com/986238"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8176"
    },
    {
      "cve": "CVE-2015-1789",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1789"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1789",
          "url": "https://www.suse.com/security/cve/CVE-2015-1789"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934489 for CVE-2015-1789",
          "url": "https://bugzilla.suse.com/934489"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934666 for CVE-2015-1789",
          "url": "https://bugzilla.suse.com/934666"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 936586 for CVE-2015-1789",
          "url": "https://bugzilla.suse.com/936586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937891 for CVE-2015-1789",
          "url": "https://bugzilla.suse.com/937891"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 938432 for CVE-2015-1789",
          "url": "https://bugzilla.suse.com/938432"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 951391 for CVE-2015-1789",
          "url": "https://bugzilla.suse.com/951391"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-1789"
    },
    {
      "cve": "CVE-2015-1790",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1790"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1790",
          "url": "https://www.suse.com/security/cve/CVE-2015-1790"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934491 for CVE-2015-1790",
          "url": "https://bugzilla.suse.com/934491"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934666 for CVE-2015-1790",
          "url": "https://bugzilla.suse.com/934666"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 936586 for CVE-2015-1790",
          "url": "https://bugzilla.suse.com/936586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 938432 for CVE-2015-1790",
          "url": "https://bugzilla.suse.com/938432"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-1790"
    },
    {
      "cve": "CVE-2015-1791",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1791"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1791",
          "url": "https://www.suse.com/security/cve/CVE-2015-1791"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 933911 for CVE-2015-1791",
          "url": "https://bugzilla.suse.com/933911"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934666 for CVE-2015-1791",
          "url": "https://bugzilla.suse.com/934666"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 986238 for CVE-2015-1791",
          "url": "https://bugzilla.suse.com/986238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989464 for CVE-2015-1791",
          "url": "https://bugzilla.suse.com/989464"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-1791"
    },
    {
      "cve": "CVE-2015-1792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1792",
          "url": "https://www.suse.com/security/cve/CVE-2015-1792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934493 for CVE-2015-1792",
          "url": "https://bugzilla.suse.com/934493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 934666 for CVE-2015-1792",
          "url": "https://bugzilla.suse.com/934666"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 937891 for CVE-2015-1792",
          "url": "https://bugzilla.suse.com/937891"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 986238 for CVE-2015-1792",
          "url": "https://bugzilla.suse.com/986238"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-1792"
    },
    {
      "cve": "CVE-2015-3216",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3216"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
          "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3216",
          "url": "https://www.suse.com/security/cve/CVE-2015-3216"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 933898 for CVE-2015-3216",
          "url": "https://bugzilla.suse.com/933898"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:openssl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-devel-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-libs-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-perl-1:1.0.1e-42.el7_1.8.x86_64",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.i686",
            "SUSE Liberty Linux 7:openssl-static-1:1.0.1e-42.el7_1.8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-3216"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.