Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html - http://httpd.apache.org/security/vulnerabilities_24.html - https://github.com/apache/httpd/commit/cd2b7a26c776b0754fb98426a67804fd48118708 - http://rhn.redhat.com/errata/RHSA-2015-1667.html - https://support.apple.com/HT205217 - http://www.apache.org/dist/httpd/CHANGES_2.4 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html - https://access.redhat.com/errata/RHSA-2017:2709 - http://rhn.redhat.com/errata/RHSA-2015-1666.html - http://www.securitytracker.com/id/1032967 - http://www.ubuntu.com/usn/USN-2686-1 - http://lists.apple.com/archives/securi
ttp://www.securitytracker.com/id/1032967 - http://www.ubuntu.com/usn/USN-2686-1 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.securityfocus.com/bid/75965 - http://www.debian.org/security/2015/dsa-3325 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://support.apple.com/kb/HT205031 - https://access.redhat.com/errata/RHSA-2017:2710 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html - https://support.apple.com/HT205219 - https://access.redhat.com/errata/RHSA-2017:2708 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/th
html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://github.com/apache/httpd/commit/db81019ab88734ed35fa70294a0cfa7a19743f73 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.o
ead.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%
httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2015-3186 State: PUBLISHED Published: 2015-11-02T19:00:00 Last Updated: 2024-08-06T05:39:31.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change. Additional Analyst Notes: - CVE Program Container: References: - https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities - http://www.openwall.com/lists/oss-security/2015/10/13/1
CVE ID: CVE-2015-3187 State: PUBLISHED Published: 2015-08-12T14:00:00 Last Updated: 2024-08-06T05:39:31.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: The svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2015-1742.html - http://rhn.redhat.com/errata/RHSA-2015-1633.html - https://support.apple.com/HT206172 - http://www.debian.org/security/2015/dsa-3
n.redhat.com/errata/RHSA-2015-1633.html - https://support.apple.com/HT206172 - http://www.debian.org/security/2015/dsa-3331 - http://lists.opensuse.org/opensuse-updates/2015-08/msg00022.html - http://subversion.apache.org/security/CVE-2015-3187-advisory.txt - http://www.securityfocus.com/bid/76273 - http://www.ubuntu.com/usn/USN-2721-1 - http://www.securitytracker.com/id/1033215 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html - https://security.gentoo.org/glsa/201610-05
CVE ID: CVE-2015-3188 State: PUBLISHED Published: 2017-01-13T15:00:00 Last Updated: 2024-08-06T05:39:31.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1032695 - http://www.securityfocus.com/archive/1/535804/100/0/threaded - http://packetstormsecurity.com/files/132417/Apache-Storm-0.10.0-beta-Code-Execution.html
CVE ID: CVE-2015-3189 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T05:39:32.005Z Vendors: Pivotal Products: Cloud Foundry Problem Types: Password reset weakness Description: With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset Links are not expired after the user changes their current email address to a new one. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected. Additional Analyst Notes: - CVE Program Container: References: - ht
d for integration via SAML or LDAP are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-3189
CVE ID: CVE-2015-3190 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T05:39:31.774Z Vendors: Pivotal Products: Cloud Foundry Problem Types: Open redirect Description: With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is susceptible to an open redirect which allows an attacker to insert malicious web page as a redirect parameter. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-3190
CVE ID: CVE-2015-3191 State: PUBLISHED Published: 2017-05-25T17:00:00 Last Updated: 2024-08-06T05:39:31.578Z Vendors: Pivotal Products: Cloud Foundry Problem Types: CSRF Description: With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the change_email form in UAA is vulnerable to a CSRF attack. This allows an attacker to trigger an e-mail change for a user logged into a cloud foundry instance via a malicious link on a attacker controlled site. This vulnerability is applicable only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDA
able only when using the UAA internal user store for authentication. Deployments enabled for integration via SAML or LDAP are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2015-3191
CVE ID: CVE-2015-3192 State: PUBLISHED Published: 2016-07-12T19:00:00 Last Updated: 2024-08-06T05:39:31.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2035.html - http://www.securitytracker.com/id/1036587 - http://pivotal.io/security/cve-2015-3192 - http://rhn.redhat.com/errata/RHSA-2016-2036.html - https:
er.com/id/1036587 - http://pivotal.io/security/cve-2015-3192 - http://rhn.redhat.com/errata/RHSA-2016-2036.html - https://access.redhat.com/errata/RHSA-2016:1218 - http://www.securityfocus.com/bid/90853 - http://rhn.redhat.com/errata/RHSA-2016-1592.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162015.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162017.html - https://jira.spring.io/browse/SPR-13136 - http://rhn.redhat.com/errata/RHSA-2016-1593.html - https://access.redhat.com/errata/RHSA-2016:1219 - https://lists.debian.org/debian-lts-announce/2019/07/msg00012.html
CVE ID: CVE-2015-3193 State: PUBLISHED Published: 2015-12-06T00:00:00 Last Updated: 2024-08-06T05:39:32.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/Cisc
te. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl - https://kb.isc.org/article/AA-01438 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://blog.fuzzing-project.org/31-Fuzzing-Math-miscalculations-in-OpenSSLs-BN_mod_exp-CVE-2015-3193.html - http://www.fortiguard.com/advisory/openssl-advisory-december-2015 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisorie
com/technetwork/security-advisory/cpuoct2017-3236626.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.539966 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://www.ubuntu.com/usn/USN-2830-1 - http://www.securityfocus.com/bid/78705 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - https://bugzilla.redhat.com/show_bug.cgi?id=1288317 - http://openssl.org/news/secadv/20151203.txt - http://www.securitytracker.com/id/1034294 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=
secadv/20151203.txt - http://www.securitytracker.com/id/1034294 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d73cc256c8e256c32ed959456101b73ba9842f72 - http://fortiguard.com/advisory/openssl-advisory-december-2015 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-3194 State: PUBLISHED Published: 2015-12-06T00:00:00 Last Updated: 2024-08-06T05:39:31.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter. Additional Analyst Notes: - CVE Program Container: References: - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - http://www.securityfocus.
5 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667 - http://www.securityfocus.com/bid/78623 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c394a488942387246653833359a5c94b5832674e - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html - http://lists.opensuse.org/opensus
832674e - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html - http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html - http://rhn.redhat.com/errata/RHSA-2015-2617.html - http://www.fortiguard.com/advisory/openssl-advisory-december-2015 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - https://bugzilla.redhat.com/show_bug.cgi?id=1288320 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www
t.com/show_bug.cgi?id=1288320 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d8541d7e9e63bf5f343af24644046c8d96498c17 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://marc.info/?l=bugtraq&m=145382583417444&w=2 - http://www.ubuntu.com/usn/USN-2830-1 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html - http://www.oracle.com/tec
1.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://openssl.org/news/secadv/20151203.txt - http://www.securitytracker.com/id/1034294 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://fortiguard.com/advisory/openssl-advisory-december-2015 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322 - http://www.debian.org/security
ttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322 - http://www.debian.org/security/2015/dsa-3413 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-3195 State: PUBLISHED Published: 2015-12-06T00:00:00 Last Updated: 2024-08-06T05:39:31.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.apple.co
References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - http://rhn.redhat.com/errata/RHSA-2016-2056.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085 - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - https://support.apple.com/HT206167 - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - htt
kb/docDisplay?docId=emr_na-c04944173 - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html - http://rhn.redhat.com/errata/RHSA-2015-2617.html - http://www.fortiguard.com/advisory/openssl-advisory-december-2015 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583 - http://lists.opensuse.org/opensuse-s
e.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100 - http://www.securityfocus.com/bid/78626 - http://rhn.redhat.com/errata/RHSA-2015-2616.html - http://kb.juniper.net/InfoCenter/index?pag
urityfocus.com/bid/78626 - http://rhn.redhat.com/errata/RHSA-2015-2616.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://marc.info/?l=bugtraq&m=145382583417444&w=2 - http://www.ubuntu.com/usn/USN-2830-1 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/91787 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://openssl.org/news/secadv/20151203.txt - http://www.or
m/technetwork/topics/security/bulletinjan2016-2867206.html - http://openssl.org/news/secadv/20151203.txt - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://www.securitytracker.com/id/1034294 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=cc598f321fbac9c04da5766243ed55d55948637d - http://fortiguard.com/advisory/openssl-advisory-december-2015 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322 -
nssl-advisory-december-2015 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322 - http://www.debian.org/security/2015/dsa-3413 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-3196 State: PUBLISHED Published: 2015-12-06T00:00:00 Last Updated: 2024-08-06T05:39:31.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl - https://h20566.www2.hpe.com/portal/site/hpsc/pu
ecurity/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3c66a669dfc7b3792f7af0758ea26fe8502ce70c - http://rhn.redhat.com/errata/RHSA-2015-2617.html - http://www.fortiguard.com/advisory/openssl-advisory-december-2015 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583 - http://www.securityfocus.com/bid/78622 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwo
id/78622 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 - http://marc.info/?l=bugtraq&m=145382583417444&w=2 - http://www.ubuntu.com/usn/USN-2830-1 - http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.o
echnetwork/security-advisory/cpuapr2016v3-2985753.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://openssl.org/news/secadv/20151203.txt - http://www.securitytracker.com/id/1034294 - http://fortiguard.com/advisory/openssl-advisory-december-2015 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322 - http://www.debian.org/security/2015/dsa-3413 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-3197 State: PUBLISHED Published: 2016-02-15T00:00:00 Last Updated: 2024-08-06T05:39:31.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://lists.fedoraproject.org/pipermail/package-announce/