01 Record

CVE-2015-0293

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 21.25% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 97.4% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2015-03-19 00:00Z11 YR AGO

Last updated

2024-08-06 04:03Z2 YR AGO

Reserved

2014-11-18

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-20Improper Input ValidationClass
CWE-617Reachable AssertionBase

Data version

5.1

Document digest

b42de3d93024a2851d0a8fa81db66b9b578b6dd98e8919a0b61e7e79a09e4ef1

05 Affected products

VendorProductVersionsPlatforms

opensslopensslNot specified—

redhatenterprise_linuxNot specified—

redhatjboss_enterprise_application_platformNot specified—

redhatjboss_enterprise_web_serverNot specified—

redhatrhel_ausNot specified—

redhatrhel_elsNot specified—

redhatrhel_mission_criticalNot specified—

redhatstorageNot specified—

06 References

kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10110
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
rhn.redhat.comRHSA-2015:0715http://rhn.redhat.com/errata/RHSA-2015-0715.htmlvendor-advisory
lists.opensuse.orgopenSUSE-SU-2015:0554http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.htmlvendor-advisory
kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680
www.ubuntu.comUSN-2537-1http://www.ubuntu.com/usn/USN-2537-1vendor-advisory
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
marc.infoHPSBMU03409http://marc.info/?l=bugtraq&m=144050155601375&w=2vendor-advisory
lists.fedoraproject.orgFEDORA-2015-4303http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.htmlvendor-advisory
bto.bluecoat.comhttps://bto.bluecoat.com/security-advisory/sa92
www.openssl.orghttps://www.openssl.org/news/secadv_20150319.txt
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1202404
lists.opensuse.orgopenSUSE-SU-2016:0638http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.htmlvendor-advisory
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
marc.infoHPSBMU03380http://marc.info/?l=bugtraq&m=143748090628601&w=2vendor-advisory
git.openssl.orghttps://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=86f8fb0e344d62454f8daf3e15236b2b59210756
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
lists.opensuse.orgSUSE-SU-2016:0621http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.htmlvendor-advisory
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
lists.fedoraproject.orgFEDORA-2015-4300http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.htmlvendor-advisory
lists.apple.comAPPLE-SA-2015-06-30-2http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlvendor-advisory
lists.fedoraproject.orgFEDORA-2015-6951http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.htmlvendor-advisory
lists.opensuse.orgopenSUSE-SU-2016:0640http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlvendor-advisory
access.redhat.comhttps://access.redhat.com/articles/1384453
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
lists.opensuse.orgSUSE-SU-2016:1057http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.htmlvendor-advisory
marc.infoHPSBUX03334http://marc.info/?l=bugtraq&m=143213830203296&w=2vendor-advisory
www.mandriva.comMDVSA-2015:063http://www.mandriva.com/security/advisories?name=MDVSA-2015:063vendor-advisory
lists.opensuse.orgSUSE-SU-2015:0541http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.htmlvendor-advisory
lists.opensuse.orgopenSUSE-SU-2016:0720http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.htmlvendor-advisory
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
lists.opensuse.orgSUSE-SU-2016:0624http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.htmlvendor-advisory
rhn.redhat.comRHSA-2015:0716http://rhn.redhat.com/errata/RHSA-2015-0716.htmlvendor-advisory
support.apple.comhttp://support.apple.com/kb/HT204942
lists.opensuse.orgSUSE-SU-2015:0578http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.htmlvendor-advisory
www.freebsd.orgFreeBSD-SA-15:06https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.ascvendor-advisory
lists.opensuse.orgSUSE-SU-2016:0631http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.htmlvendor-advisory
marc.infoHPSBMU03397http://marc.info/?l=bugtraq&m=144050297101809&w=2vendor-advisory
lists.opensuse.orgSUSE-SU-2016:0617http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.htmlvendor-advisory
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
rhn.redhat.comRHSA-2015:0752http://rhn.redhat.com/errata/RHSA-2015-0752.htmlvendor-advisory
rhn.redhat.comRHSA-2015:0800http://rhn.redhat.com/errata/RHSA-2015-0800.htmlvendor-advisory
www.securityfocus.com73232http://www.securityfocus.com/bid/73232vdb-entry
www.securitytracker.com1031929http://www.securitytracker.com/id/1031929vdb-entry
www.mandriva.comMDVSA-2015:062http://www.mandriva.com/security/advisories?name=MDVSA-2015:062vendor-advisory
lists.opensuse.orgopenSUSE-SU-2016:0628http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.htmlvendor-advisory
lists.fedoraproject.orgFEDORA-2015-4320http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.htmlvendor-advisory
support.citrix.comhttps://support.citrix.com/article/CTX216642
lists.fedoraproject.orgFEDORA-2015-6855http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.htmlvendor-advisory
lists.opensuse.orgSUSE-SU-2016:0620http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.htmlvendor-advisory
lists.opensuse.orgopenSUSE-SU-2016:0637http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.htmlvendor-advisory
lists.opensuse.orgSUSE-SU-2016:0641http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.htmlvendor-advisory
security.gentoo.orgGLSA-201503-11https://security.gentoo.org/glsa/201503-11vendor-advisory
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

01 Record index

CVE-2015-0293

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2015-0293

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References