Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0282 State: PUBLISHED Published: 2015-03-24T17:00:00 Last Updated: 2024-08-06T04:03:10.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnutls.org/security.html - http://www.debian.org/security/2015/dsa-3191 - http://www.securityfocus.com/bid/73119 - http://rhn.redhat.com/errata/RHSA-2015-1457.html - http://www.securitytracker.com/id/1032148
CVE ID: CVE-2015-0283 State: PUBLISHED Published: 2015-03-30T14:00:00 Last Updated: 2024-08-06T04:03:10.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups. Additional Analyst Notes: - CVE Program Container: References: - https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097 - http://lists.fedoraproject.org/pipermail/package-ann
slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097 - http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html - http://www.securityfocus.com/bid/73377 - https://bugzilla.redhat.com/show_bug.cgi?id=1195729 - http://rhn.redhat.com/errata/RHSA-2015-0728.html
CVE ID: CVE-2015-0284 State: PUBLISHED Published: 2016-04-14T14:00:00 Last Updated: 2024-08-06T04:03:10.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7811. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-0590.html - https://bugzilla.redhat.com/show_bug.cgi?id=1181472 - https://github.com/spacewalkproject/spacewalk/c
A-2016-0590.html - https://bugzilla.redhat.com/show_bug.cgi?id=1181472 - https://github.com/spacewalkproject/spacewalk/commit/dd418384171473c3e31386a1b4792f8c555dc744 - https://bugzilla.redhat.com/show_bug.cgi?id=1315398 - https://bugzilla.redhat.com/show_bug.cgi?id=1314906 - https://bugzilla.redhat.com/show_bug.cgi?id=1181152 - https://github.com/spacewalkproject/spacewalk/commit/f3792c79c1c251a49cc4e382be8591636326a794
CVE ID: CVE-2015-0285 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://git.openssl.o
e=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=e1b568dd2462f7cacf98f3d117936c34e2849a6b - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202410 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://w
hat.com/show_bug.cgi?id=1202410 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.securitytracker.com/id/1031929 - http://www.securityfocus.com/bid/73234 - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0286 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http:/
yst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 - http://www.debian.org/security/2015/dsa-3197 - http://www.ubuntu.com/usn/USN-2537-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http
/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensuse.org/ope
02.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://access.redhat.com/articles/1384453 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - http://www.securitytracker.com/id/1032917 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - https://support.apple.com/HT205267 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - https://bugzilla.redhat.com/show_bug.cgi?id=1202366 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - h
ttps://bugzilla.redhat.com/show_bug.cgi?id=1202366 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0716.html - http://marc.info/?l=bugtraq&m=142841429220765&w=2 - http://support.apple.com/kb/HT204942 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://marc.info/?l=bugtraq&m=14405029710180
ttps://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c3c7fb07dc975dc3c9de0eddb7d8fd79fc9c67c1 - http://rhn.redhat.com/errata/RHSA-2016-2957.html - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www.oracle.com/technetwork/security-advisory/cpu
ttp://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html - https://support.citrix.com/article/CTX216642 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - http://www.securityfocus.com/bid/73225 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0287 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/techne
am Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 - http://www.debian.org/security/2015/dsa-3197 - http://www.ubuntu.com/usn/USN-2537-1 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b717b083073b6cacc0a5e2397b661678aff7ae7f - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/secur
&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - https://support.apple.com/HT205212 - http://www.securityfocus.com/bid/73227 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.h
ipermail/package-announce/2015-March/152844.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://access.redhat.com/articles/1384453 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - https://support.apple.com/HT205267 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/
www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0716.html - http://marc.info/?l=bugtraq&m=142841429220765&w=2 - http://support.apple.com/kb/HT204942 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - htt
le.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - http://rhn.redhat.com/errata/RHSA-2015-0800.html - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html - https://support.citrix.com/article/CTX216642 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html - https:/
nnounce/2016-03/msg00017.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202380 - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0288 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.ht
tp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 - http://www.debian.org/security/2015/dsa-3197 - http://www.ubuntu.com/usn/USN-2537-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=14374809062860
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - https://rt.openssl.org/Ticket/Display.html?id=3708&user=guest&pass=guest - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://access.redhat.com/articles/1384453 - http://www.oracle.com/technetwork/security-advisory/cpuoct20
sg00011.html - https://access.redhat.com/articles/1384453 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://www.securityfocus.com/bid/73237 - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0716.html - http://marc.info/?l=bugtraq&m=142841429220765&w=2 - http://support.apple.com/kb/HT204942 - http://lists.opensuse.org/
- http://marc.info/?l=bugtraq&m=142841429220765&w=2 - http://support.apple.com/kb/HT204942 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202418 - http://rhn.redhat.com/errata/RHSA-2015-0752.html - http://rhn.redhat.com/errata/RHSA-2015-0800.html - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - h
http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html - https://support.citrix.com/article/CTX216642 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html - http://marc.info/?l=bugtraq&m=144050254401665&w=2 - https://security.gentoo.org/glsa/201503-11 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=28a00bcd8e318da18031b2ac8778c64147cd54f9 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0289 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mca
7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://rhn.redhat.com/errata/RHSA-2015-0715.html - http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 - http://www.debian.org/security/2015/dsa-3197 - http://www.ubuntu.com/usn/USN-2537-1 - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 -
.fedoraproject.org/pipermail/package-announce/2015-March/152733.html - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http://www.securityfocus.com/bid/73231 - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.fedoraproject.o
74006c3631b0f9 - http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html - https://access.redhat.com/articles/1384453 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:063 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://www.fortiguard.com/advisory/2015-03-24-openssl-v
.opensuse.org/opensuse-security-announce/2015-03/msg00022.html - http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0716.html - http://marc.info/?l=bugtraq&m=142841429220765&w=2 - http://support.apple.com/kb/HT204942 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202384 - https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-237
ttp://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html - http://rhn.redhat.com/errata/RHSA-2015-0752.html - http://rhn.redhat.com/errata/RHSA-2015-0800.html - http://www.securitytracker.com/id/1031929 - http://marc.info/?l=bugtraq&m=143213830203296&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:062 - http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2015-0290 State: PUBLISHED Published: 2015-03-19T00:00:00 Last Updated: 2024-08-06T04:03:10.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/73226 - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/
focus.com/bid/73226 - https://kc.mcafee.com/corporate/index?page=content&id=SB10110 - http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html - http://marc.info/?l=bugtraq&m=144050155601375&w=2 - https://bto.bluecoat.com/security-advisory/sa92 - https://www.openssl.org/news/secadv_20150319.txt - http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html - http://marc.info/?l=bugtraq&m=143748090628601&w=2 - http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html - https://bugzilla.redhat.com/show_bug.cgi?id=1202345 - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://git.openssl.org/?p=openssl.git%3Ba=commit
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=77c77f0a1b9f15b869ca3342186dfbedd1119d0e - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://marc.info/?l=bugtraq&m=144050297101809&w=2 - http://www.securitytracker.com/id/1031929 - https://security.gentoo.org/glsa/201503-11 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf