CVE - CVE - 2015 - 0209

CVE-ID
cve - 2015 - 0209	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
Use-after-free脆弱性在加密/ ec / ec_asn1 d2i_ECPrivateKey函数。c OpenSSL 0.9.8zf之前,1.0.0 1.0.0r之前,在1.0.1m 1.0.1, 1.0.2 1.0.2a之前可能允许远程攻击者造成拒绝服务(内存腐败和应用程序崩溃)或可能未指明的其他影响通过椭圆曲线畸形(EC)私有密钥文件,导入期间处理不当。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
苹果:苹果- sa - 2015 - 06 - 30 - 2 URL: http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html 报价:73239 URL: http://www.securityfocus.com/bid/73239 确认:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 确认:http://support.apple.com/kb/HT204942 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2017 - 3236626. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinapr2015 - 2511959. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinjan2015 - 2370101. - html 确认:http://www.oracle.com/technetwork/topics/security/cpujan2016 - 2367955. - html 确认:http://www.oracle.com/technetwork/topics/security/cpujul2015 - 2367936. - html 确认:http://www.oracle.com/technetwork/topics/security/cpuoct2015 - 2367953. - html 确认:https://access.redhat.com/articles/1384453 确认:https://bto.bluecoat.com/security-advisory/sa92 确认:https://bugzilla.redhat.com/show_bug.cgi?id=1196737 确认:https://cert - portal.siemens.com/productcert/pdf/ssa - 412672. - pdf 确认:https://git.openssl.org/gitweb/?p=openssl.git; =提交;h = 1 b4a8df38fc9ab3c089ca5765075ee53ec5bd66a 确认:https://kc.mcafee.com/corporate/index?page=content&id=SB10110 确认:https://support.citrix.com/article/CTX216642 确认:https://www.openssl.org/news/万博下载包secadv_20150319.txt DEBIAN: dsa - 3197 URL: http://www.debian.org/security/2015/dsa - 3197 FEDORA: FEDORA - 2015 - 4300 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html FEDORA: FEDORA - 2015 - 4303 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html FEDORA: FEDORA - 2015 - 4320 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html FEDORA: FEDORA - 2015 - 6855 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html FEDORA: FEDORA - 2015 - 6951 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html FREEBSD: FreeBSD-SA-15:06 URL: https://www.freebsd.org/security/advisories/freebsd - sa - 15% - 3 - a06.openssl.asc GENTOO: glsa - 201503 - 11所示 URL: https://security.gentoo.org/glsa/201503-11 惠普:HPSBGN03306 URL: http://marc.info/?l=bugtraq&m=142841429220765&w=2 惠普:HPSBMU03380 URL: http://marc.info/?l=bugtraq&m=143748090628601&w=2 惠普:HPSBMU03397 URL: http://marc.info/?l=bugtraq&m=144050297101809&w=2 惠普:HPSBMU03409 URL: http://marc.info/?l=bugtraq&m=144050155601375&w=2 惠普:HPSBMU03413 URL: http://marc.info/?l=bugtraq&m=144050254401665&w=2 惠普:HPSBUX03334 URL: http://marc.info/?l=bugtraq&m=143213830203296&w=2 惠普:SSRT102000 URL: http://marc.info/?l=bugtraq&m=143213830203296&w=2 MANDRIVA: MDVSA-2015:062 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:062~~(过时的来源) MANDRIVA: MDVSA-2015:063 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:063~~(过时的来源) 红帽:RHSA-2015:0715 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0715. - html 红帽:RHSA-2015:0716 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0716. - html 红帽:RHSA-2015:0752 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0752. - html 红帽:RHSA-2016:1089 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 1089. - html 红帽:RHSA-2016:2957 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 2957. - html SECTRACK: 1031929 URL: http://www.securitytracker.com/id/1031929 SUSE: SUSE-SU-2015:0541 URL: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html SUSE: openSUSE-SU-2015:0554 URL: http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html SUSE: openSUSE-SU-2015:1277 URL: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html SUSE: openSUSE-SU-2016:0640 URL: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html UBUNTU: usn - 2537 - 1 URL: http://www.ubuntu.com/usn/usn - 2537 - 1
分配中央社
红帽公司。
创建日期记录
20141118	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20141118)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2015 - 0209