CVE

Id
77553  
CVE No.
CVE-2015-0290  
Status
Candidate  
Description
The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.  
Phase
Assigned (20141118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
709875 77553 CVE-2015-0290 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1202345  View
709876 77553 CVE-2015-0290 CONFIRM:https://git.openssl.org/?p=openssl.git;a=commit;h=77c77f0a1b9f15b869ca3342186dfbedd1119d0e  View
709877 77553 CVE-2015-0290 CONFIRM:https://www.openssl.org/news/secadv_20150319.txt  View
709878 77553 CVE-2015-0290 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
709879 77553 CVE-2015-0290 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
709880 77553 CVE-2015-0290 CONFIRM:https://bto.bluecoat.com/security-advisory/sa92  View
709881 77553 CVE-2015-0290 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
709882 77553 CVE-2015-0290 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
709883 77553 CVE-2015-0290 CONFIRM:https://kc.mcafee.com/corporate/index?page=content&id=SB10110  View
709884 77553 CVE-2015-0290 GENTOO:GLSA-201503-11  View
709885 77553 CVE-2015-0290 URL:https://security.gentoo.org/glsa/201503-11  View
709886 77553 CVE-2015-0290 HP:HPSBMU03380  View
709887 77553 CVE-2015-0290 URL:http://marc.info/?l=bugtraq&m=143748090628601&w=2  View
709888 77553 CVE-2015-0290 HP:HPSBMU03397  View
709889 77553 CVE-2015-0290 URL:http://marc.info/?l=bugtraq&m=144050297101809&w=2  View
709890 77553 CVE-2015-0290 HP:HPSBMU03409  View
709891 77553 CVE-2015-0290 URL:http://marc.info/?l=bugtraq&m=144050155601375&w=2  View
709892 77553 CVE-2015-0290 BID:73226  View
709893 77553 CVE-2015-0290 URL:http://www.securityfocus.com/bid/73226  View
709894 77553 CVE-2015-0290 SECTRACK:1031929  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6492 JVNDB-2015-001812 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2015-0342 77553 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001812.html  View