VuXML: OpenSSL -- multiple vulnerabilities

Affected packages

1.0.1

openssl

1.0.1_19

1.0.1

mingw32-openssl

1.0.1m

linux-c6-openssl

1.0.1e_4

libressl

2.1.5_1

10.1

FreeBSD

10.1_8

9.3

FreeBSD

9.3_12

8.4

FreeBSD

8.4_26

Details

VuXML ID	9d15355b-ce7c-11e4-9db0-d050992ecde8
Discovery	2015-03-19
Entry	2015-03-19
Modified	2016-08-09

VuXML ID

9d15355b-ce7c-11e4-9db0-d050992ecde8

Discovery

2015-03-19

Entry

2015-03-19

Modified

2016-08-09

OpenSSL project reports:

Reclassified: RSA silently downgrades to EXPORT_RSA [Client] (CVE-2015-0204). OpenSSL only.

Segmentation fault in ASN1_TYPE_cmp (CVE-2015-0286)

ASN.1 structure reuse memory corruption (CVE-2015-0287)

PKCS#7 NULL pointer dereferences (CVE-2015-0289)

Base64 decode (CVE-2015-0292). OpenSSL only.

DoS via reachable assert in SSLv2 servers (CVE-2015-0293). OpenSSL only.

Use After Free following d2i_ECPrivatekey error (CVE-2015-0209)

X509_to_X509_REQ NULL pointer deref (CVE-2015-0288)

[source]

References

CVE Name

CVE-2015-0204

CVE Name

CVE-2015-0209

CVE Name

CVE-2015-0286

CVE Name

CVE-2015-0287

CVE Name

CVE-2015-0288

CVE Name

CVE-2015-0289

CVE Name

CVE-2015-0292

CVE Name

CVE-2015-0293

FreeBSD PR

ports/198681

FreeBSD Advisory

SA-15:06.openssl

URL

https://www.openssl.org/news/secadv_20150319.txt