JVN/CVE Demo: Nvdinfos

NVD

Id: 22768
Name: CVE-2015-0287
Description: The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.
Reject
CVSS Version: 2
CVSS Score: 5
Severity: Medium
CVSS Base Score: 5
CVSS Impact Subscore: 2.9
CVSS Exploit Subscore: 10
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Pub Date: 2017-01-19
Published: 2015-03-19
Modified Date: 2017-01-02
Seq: 2015-0287

Actions

Related NVD References

Id	NVD Id	NVD No.	Reference	Actions
120709	22768	CVE-2015-0287	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680	View
120710	22768	CVE-2015-0287	APPLE-SA-2015-06-30-2	View
120711	22768	CVE-2015-0287	APPLE-SA-2015-09-16-1	View
120712	22768	CVE-2015-0287	APPLE-SA-2015-09-30-3	View
120713	22768	CVE-2015-0287	FEDORA-2015-4303	View
120714	22768	CVE-2015-0287	FEDORA-2015-4320	View
120715	22768	CVE-2015-0287	FEDORA-2015-4300	View
120716	22768	CVE-2015-0287	FEDORA-2015-6951	View
120717	22768	CVE-2015-0287	FEDORA-2015-6855	View
120718	22768	CVE-2015-0287	SUSE-SU-2015:0541	View
120719	22768	CVE-2015-0287	SUSE-SU-2015:0578	View
120720	22768	CVE-2015-0287	openSUSE-SU-2015:1277	View
120721	22768	CVE-2015-0287	openSUSE-SU-2016:0640	View
120722	22768	CVE-2015-0287	SUSE-SU-2016:0678	View
120723	22768	CVE-2015-0287	openSUSE-SU-2015:0554	View
120724	22768	CVE-2015-0287	HPSBGN03306	View
120725	22768	CVE-2015-0287	SSRT102000	View
120726	22768	CVE-2015-0287	HPSBMU03380	View
120727	22768	CVE-2015-0287	HPSBMU03409	View
120728	22768	CVE-2015-0287	HPSBMU03397	View
120729	22768	CVE-2015-0287	RHSA-2015:0715	View
120730	22768	CVE-2015-0287	RHSA-2015:0716	View
120731	22768	CVE-2015-0287	RHSA-2015:0752	View
120732	22768	CVE-2015-0287	RHSA-2015:0800	View
120733	22768	CVE-2015-0287	http://support.apple.com/kb/HT204942	View
120734	22768	CVE-2015-0287	DSA-3197	View
120735	22768	CVE-2015-0287	MDVSA-2015:062	View
120736	22768	CVE-2015-0287	MDVSA-2015:063	View
120737	22768	CVE-2015-0287	http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	View
120738	22768	CVE-2015-0287	http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html	View
120739	22768	CVE-2015-0287	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	View
120740	22768	CVE-2015-0287	http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	View
120741	22768	CVE-2015-0287	http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	View
120742	22768	CVE-2015-0287	73227	View
120743	22768	CVE-2015-0287	1031929	View
120744	22768	CVE-2015-0287	USN-2537-1	View
120745	22768	CVE-2015-0287	https://access.redhat.com/articles/1384453	View
120746	22768	CVE-2015-0287	https://bto.bluecoat.com/security-advisory/sa92	View
120747	22768	CVE-2015-0287	https://bugzilla.redhat.com/show_bug.cgi?id=1202380	View
120748	22768	CVE-2015-0287	https://git.openssl.org/?p=openssl.git;a=commit;h=b717b083073b6cacc0a5e2397b661678aff7ae7f	View
120749	22768	CVE-2015-0287	https://kc.mcafee.com/corporate/index?page=content&id=SB10110	View
120750	22768	CVE-2015-0287	GLSA-201503-11	View
120751	22768	CVE-2015-0287	https://support.apple.com/HT205212	View
120752	22768	CVE-2015-0287	https://support.apple.com/HT205267	View
120753	22768	CVE-2015-0287	FreeBSD-SA-15:06	View
120754	22768	CVE-2015-0287	https://www.openssl.org/news/secadv_20150319.txt	View

Related JVN

Id	Name	Title	Summary	Cveinfo Name	Cveinfo Id	Nvdinfo Name	Nvdinfo Id	Cvssv2	Cvssv3	Jvnurl	Published Date	Last Updated Date	Actions
6562	JVNDB-2015-001882	OpenSSL の crypto/asn1/tasn_dec.c 内の ASN1_item_ex_d2i 関数におけるサービス運用妨害 (DoS) の脆弱性	OpenSSL の crypto/asn1/tasn_dec.c 内の ASN1_item_ex_d2i 関数は、CHOICE および ADB データ構造を再初期化しないため、サービス運用妨害 (不正な書き込み操作およびメモリ破損) 状態にされる脆弱性が存在します。	CVE-2015-0287	77498	CVE-2015-0287	22768	5		http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001882.html	2015-03-19	2016-11-09	View

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.49 MB
Controller render start	2.35 MB
View render complete	33.21 MB

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.60
Event: Controller.initialize	0.02
Event: Controller.startup	0.08
Controller action	275.45
Event: Controller.beforeRender	4.84
» Processing toolbar data	4.74
Rendering View	1315.48
» Event: View.beforeRender	0.02
» Rendering APP/View/Nvdinfos/view.ctp	1268.42
» Event: View.afterRender	0.04
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	31.57
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	9.53
Event: View.afterLayout	0.00

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/nvdinfos/view/22768
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/nvdinfos/view/22768
Remote Port	40536
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.148
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.78.197
Http Via	1.1 squid-proxy-5b5d847c96-v2jzj (squid/6.10)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	216.73.216.148
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.148
Unique Id	aFjXBTX63XjYlF5Po_WrEQAAASc
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	216.73.216.148
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.148
Redirect Unique Id	aFjXBTX63XjYlF5Po_WrEQAAASc
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	216.73.216.148
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.148
Redirect Redirect Unique Id	aFjXBTX63XjYlF5Po_WrEQAAASc
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1750652677.949
Request Time	1750652677

NVD

Actions

Related NVD References

Related JVN

Request History

Session

Request

Cake Params

Post data

Query string

Cookie

Current Route

Sql Logs

default

Memory

Timers

Logs

View Variables

App Constants

CakePHP Constants

PHP Environment

Included Files

Include Paths

Included Files