Cloudanix VulnDB

CVE-2015-0206

None

CVSS

—

EPSS

57.4%

Published

Jan 9, 2015

CISA due date

—

The record

Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 openssl 0 1.0.1k-1
Debian:12 openssl 0 1.0.1k-1
Debian:13 openssl 0 1.0.1k-1
Debian:7 openssl 0 1.0.1e-2+deb7u14
Mageia:4 openssl 0 1.0.1k-1.mga4
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::workstation openssl-debuginfo 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::workstation openssl-devel 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::workstation openssl-perl 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:6::workstation openssl-static 0 0:1.0.1e-30.el6_6.5
Red Hat:enterprise_linux:7::client openssl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::client openssl-debuginfo 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::client openssl-devel 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::client openssl-libs 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::client openssl-perl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::client openssl-static 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::computenode openssl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::computenode openssl-debuginfo 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::computenode openssl-devel 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::computenode openssl-libs 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::computenode openssl-perl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::computenode openssl-static 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::server openssl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::server openssl-debuginfo 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::server openssl-devel 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::server openssl-libs 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::server openssl-perl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::server openssl-static 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::workstation openssl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::workstation openssl-debuginfo 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::workstation openssl-devel 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::workstation openssl-libs 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::workstation openssl-perl 0 1:1.0.1e-34.el7_0.7
Red Hat:enterprise_linux:7::workstation openssl-static 0 1:1.0.1e-34.el7_0.7
Ubuntu:14.04:LTS openssl 0 1.0.1f-1ubuntu2.8
openSUSE:Tumbleweed libressl 0 2.5.0-1.1
openSUSE:Tumbleweed openssl-1_1 0 1.1.1l-1.2

Related vulnerabilities