2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2015-0206" ,
"sourceIdentifier" : "secalert@redhat.com" ,
"published" : "2015-01-09T02:59:12.117" ,
"lastModified" : "2017-10-20T01:29:04.393" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection."
} ,
{
"lang" : "es" ,
"value" : "Fuga de memoria en la funci\u00f3n dtls1_buffer_record en d1_pkt.c en OpenSSL 1.0.0 anterior a 1.0.0p y 1.0.1 anterior a 1.0.1k permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de memoria) mediante el env\u00edo de muchos archivos duplicados para la pr\u00f3xima \u00e9poca, lo que provoca un fallo de la detecci\u00f3n de la reproducci\u00f3n."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "PARTIAL" ,
"baseScore" : 5.0
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-119"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "10FF0A06-DA61-4250-B083-67E55E362677"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A6BA453-C150-4159-B80B-5465EFF83F11"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "638A2E69-8AB6-4FEA-852A-FEF16A500C1A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "56C47D3A-B99D-401D-B6B8-1194B2DB4809"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "08355B10-E004-4BE6-A5AE-4D428810580B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "738BCFDC-1C49-4774-95AE-E099F707DEF9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4B242C0-D27D-4644-AD19-5ACB853C9DC2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8DC683F2-4346-4E5E-A8D7-67B4F4D7827B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "764B7D38-BC1B-47DB-B1DF-D092BDA4BFCB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6604E7BE-9F9B-444D-A63A-F65D1CFDF3BF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "132B9217-B0E0-4E3E-9096-162AA28E158E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7619F9A0-9054-4217-93D1-3EA64876C5B0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D82C405-17E2-4DF1-8DF5-315BD5A41595"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4C96806F-4718-4BD3-9102-55A26AA86498"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A16CD99-AF7F-4931-AD2E-77727BA18FBD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C684FB18-FDDC-4BED-A28C-C23EE6CD0094"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A74A79A7-4FAF-4C81-8622-050008B96AE1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CEDACCB9-8D61-49EE-9957-9E58BC7BB031"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E884B241-F9C3-44F8-A420-DE65F5F3D660"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3A383620-B4F7-44A7-85DA-A4FF2E115D80"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5F0C6812-F455-49CF-B29B-9AC00306DA43"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3703E445-17C0-4C85-A496-A35641C0C8DB"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147938.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148363.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=142721102728110&w=2" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=143748090628601&w=2" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=144050155601375&w=2" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=144050205101530&w=2" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=144050254401665&w=2" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=144050297101809&w=2" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://rhn.redhat.com/errata/RHSA-2015-0066.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.debian.org/security/2015/dsa-3125" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:019" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securityfocus.com/bid/71940" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securityfocus.com/bid/91787" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "http://www.securitytracker.com/id/1033378" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://bto.bluecoat.com/security-advisory/sa88" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/99704" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://github.com/openssl/openssl/commit/103b171d8fc282ef435f8de9afbf7782e312961f" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10102" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10108" ,
"source" : "secalert@redhat.com"
} ,
{
"url" : "https://www.openssl.org/news/secadv_20150108.txt" ,
"source" : "secalert@redhat.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
