Cloudanix VulnDB

CVE-2015-3196

None

CVSS

—

EPSS

13.5%

Published

Dec 6, 2015

CISA due date

—

The record

ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 openssl 0 1.0.2d-1
Debian:12 openssl 0 1.0.2d-1
Debian:13 openssl 0 1.0.2d-1
Debian:7 openssl 0 1.0.1e-2+deb7u18
Debian:8 openssl 0 1.0.1k-3+deb8u2
Mageia:5 openssl 0 1.0.2e-1.mga5
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::workstation openssl-debuginfo 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::workstation openssl-devel 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::workstation openssl-perl 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:6::workstation openssl-static 0 0:1.0.1e-42.el6_7.1
Red Hat:enterprise_linux:7::client openssl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::client openssl-debuginfo 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::client openssl-devel 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::client openssl-libs 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::client openssl-perl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::client openssl-static 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::computenode openssl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::computenode openssl-debuginfo 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::computenode openssl-devel 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::computenode openssl-libs 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::computenode openssl-perl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::computenode openssl-static 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::server openssl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::server openssl-debuginfo 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::server openssl-devel 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::server openssl-libs 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::server openssl-perl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::server openssl-static 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::workstation openssl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::workstation openssl-debuginfo 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::workstation openssl-devel 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::workstation openssl-libs 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::workstation openssl-perl 0 1:1.0.1e-51.el7_2.1
Red Hat:enterprise_linux:7::workstation openssl-static 0 1:1.0.1e-51.el7_2.1
SUSE:Linux Enterprise Desktop 12 openssl 0 1.0.1i-27.6.1
SUSE:Linux Enterprise Desktop 12 SP1 openssl 0 1.0.1i-36.1
SUSE:Linux Enterprise Server 11-SECURITY openssl1 0 1.0.1g-0.35.1
SUSE:Linux Enterprise Server 12 openssl 0 1.0.1i-27.6.1
SUSE:Linux Enterprise Server 12 SP1 openssl 0 1.0.1i-36.1
SUSE:Linux Enterprise Server for SAP Applications 12 openssl 0 1.0.1i-27.6.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 openssl 0 1.0.1i-36.1
SUSE:Linux Enterprise Software Development Kit 12 openssl 0 1.0.1i-27.6.1
SUSE:Linux Enterprise Software Development Kit 12 SP1 openssl 0 1.0.1i-36.1
Ubuntu:14.04:LTS openssl 0 1.0.1f-1ubuntu2.16
openSUSE:Tumbleweed openssl-1_1 0 1.1.1l-1.2

Related vulnerabilities