|
276251
|
- |
|
openssl
|
openssl
|
The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure …
|
CWE-20
Improper Input Validation
|
CVE-2015-0293
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276252
|
- |
|
openssl
|
openssl
|
Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote a…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-0292
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276253
|
- |
|
openssl
|
openssl
|
The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_al…
|
NVD-CWE-Other
|
CVE-2015-0291
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276254
|
- |
|
openssl
|
openssl
|
The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases…
|
CWE-17
Code
|
CVE-2015-0290
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276255
|
- |
|
openssl
|
openssl
|
The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to …
|
NVD-CWE-Other
|
CVE-2015-0289
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276256
|
- |
|
openssl
|
openssl
|
The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service…
|
NVD-CWE-Other
|
CVE-2015-0288
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276257
|
- |
|
openssl
|
openssl
|
The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structur…
|
CWE-17
Code
|
CVE-2015-0287
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276258
|
- |
|
openssl
|
openssl
|
The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, whi…
|
CWE-17
Code
|
CVE-2015-0286
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276259
|
- |
|
openssl
|
openssl
|
The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to de…
|
CWE-310
Cryptographic Issues
|
CVE-2015-0285
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
276260
|
- |
|
openssl
|
openssl
|
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote at…
|
NVD-CWE-Other
|
CVE-2015-0209
|
2024-11-21 11:22 |
2015-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|