NVD

Id
24027  
Name
CVE-2015-1787  
Description
The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-03-19  
Modified Date
2017-01-02  
Seq
2015-1787  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
127215 24027 CVE-2015-1787 HPSBMU03380  View
127216 24027 CVE-2015-1787 HPSBMU03409  View
127217 24027 CVE-2015-1787 HPSBMU03397  View
127218 24027 CVE-2015-1787 http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
127219 24027 CVE-2015-1787 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
127220 24027 CVE-2015-1787 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
127221 24027 CVE-2015-1787 http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
127222 24027 CVE-2015-1787 73238  View
127223 24027 CVE-2015-1787 1031929  View
127224 24027 CVE-2015-1787 https://bto.bluecoat.com/security-advisory/sa92  View
127225 24027 CVE-2015-1787 https://bugzilla.redhat.com/show_bug.cgi?id=1202406  View
127226 24027 CVE-2015-1787 https://git.openssl.org/?p=openssl.git;a=commit;h=b19d8143212ae5fbc9cebfd51c01f802fabccd33  View
127227 24027 CVE-2015-1787 https://kc.mcafee.com/corporate/index?page=content&id=SB10110  View
127228 24027 CVE-2015-1787 GLSA-201503-11  View
127229 24027 CVE-2015-1787 https://www.openssl.org/news/secadv_20150319.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6569 JVNDB-2015-001889 OpenSSL の s3_srvr.c の ssl3_get_client_key_exchange 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の s3_srvr.c の ssl3_get_client_key_exchange 関数には、クライアント認証および一時的に Diffie-Hellman 暗号スイートが有効になっている場合、サービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性が存在します。 CVE-2015-1787 79012 CVE-2015-1787 24027 2.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001889.html 2015-03-19 2016-11-09 View