CVE - CVE - 2015 - 0286

CVE-ID
cve - 2015 - 0286	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
在加密/ asn1 / a_type ASN1_TYPE_cmp函数。c OpenSSL 0.9.8zf之前,1.0.0 1.0.0r之前,1.0.1 1.0.1m之前,1.0.2 1.0.2a之前并没有正确地执行布尔类型比较,它允许远程攻击者造成拒绝服务(无效的读操作和应用程序崩溃)证书通过精心设计端点使用证书验证功能。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
苹果:苹果- sa - 2015 - 06 - 30 - 2 URL: http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html 苹果:苹果- sa - 2015 - 09 - 16 - 1 URL: http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html 苹果:苹果- sa - 2015 - 09 - 30 - 3所示 URL: http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html 报价:73225 URL: http://www.securityfocus.com/bid/73225 确认:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680 确认:http://support.apple.com/kb/HT204942 确认:http://www.fortiguard.com/advisory/2015 - 03 - 24 - openssl漏洞- 3月- 2015年确认:http://www.oracle.com/technetwork/security - advisory/cpujul2017 - 3236622. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2016 - 2881722. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2017 - 3236626. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinapr2015 - 2511959. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinjan2015 - 2370101. - html 确认:http://www.oracle.com/technetwork/topics/security/cpujan2016 - 2367955. - html 确认:http://www.oracle.com/technetwork/topics/security/cpujul2015 - 2367936. - html 确认:http://www.oracle.com/technetwork/topics/security/cpuoct2015 - 2367953. - html 确认:https://access.redhat.com/articles/1384453 确认:https://bto.bluecoat.com/security-advisory/sa92 确认:https://bugzilla.redhat.com/show_bug.cgi?id=1202366 确认:https://cert - portal.siemens.com/productcert/pdf/ssa - 412672. - pdf 确认:https://git.openssl.org/?p=openssl.git; =提交;h = c3c7fb07dc975dc3c9de0eddb7d8fd79fc9c67c1 确认:https://kc.mcafee.com/corporate/index?page=content&id=SB10110 确认:https://support.apple.com/HT205212 确认:https://support.apple.com/HT205267 确认:https://support.citrix.com/article/CTX216642 确认:https://www.openssl.org/news/万博下载包secadv_20150319.txt DEBIAN: dsa - 3197 URL: http://www.debian.org/security/2015/dsa - 3197 FEDORA: FEDORA - 2015 - 4300 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html FEDORA: FEDORA - 2015 - 4303 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html FEDORA: FEDORA - 2015 - 4320 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html FEDORA: FEDORA - 2015 - 6855 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html FEDORA: FEDORA - 2015 - 6951 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html FREEBSD: FreeBSD-SA-15:06 URL: https://www.freebsd.org/security/advisories/freebsd - sa - 15% - 3 - a06.openssl.asc 惠普:HPSBGN03306 URL: http://marc.info/?l=bugtraq&m=142841429220765&w=2 惠普:HPSBMU03380 URL: http://marc.info/?l=bugtraq&m=143748090628601&w=2 惠普:HPSBMU03397 URL: http://marc.info/?l=bugtraq&m=144050297101809&w=2 惠普:HPSBMU03409 URL: http://marc.info/?l=bugtraq&m=144050155601375&w=2 惠普:HPSBMU03413 URL: http://marc.info/?l=bugtraq&m=144050254401665&w=2 惠普:HPSBUX03334 URL: http://marc.info/?l=bugtraq&m=143213830203296&w=2 惠普:SSRT102000 URL: http://marc.info/?l=bugtraq&m=143213830203296&w=2 MANDRIVA: MDVSA-2015:062 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:062~~(过时的来源) MANDRIVA: MDVSA-2015:063 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:063~~(过时的来源) 红帽:RHSA-2015:0715 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0715. - html 红帽:RHSA-2015:0716 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0716. - html 红帽:RHSA-2015:0752 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0752. - html 红帽:RHSA-2016:2957 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 2957. - html SECTRACK: 1031929 URL: http://www.securitytracker.com/id/1031929 SECTRACK: 1032917 URL: http://www.securitytracker.com/id/1032917 SUSE: SUSE-SU-2015:0541 URL: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html SUSE: SUSE-SU-2015:0578 URL: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html SUSE: openSUSE-SU-2015:0554 URL: http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html SUSE: openSUSE-SU-2015:1277 URL: http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html SUSE: openSUSE-SU-2016:0640 URL: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html UBUNTU: usn - 2537 - 1 URL: http://www.ubuntu.com/usn/usn - 2537 - 1
分配中央社
红帽公司。
创建日期记录
20141118	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20141118)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2015 - 0286