ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 32
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 32
CVE-2015-0289
The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
CVE-2015-0289
The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
CVE-2015-0289
The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
CVE-2015-0289
The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0. ...
GHSA-cxc6-qvvg-mcqm
The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.
SUSE-SU-2015:0541-1
Security update for openssl
ELSA-2015-3022
ELSA-2015-3022: openssl-fips security update (MODERATE)
ELSA-2015-0800
ELSA-2015-0800: openssl security update (MODERATE)
ELSA-2015-0716
ELSA-2015-0716: openssl security and bug fix update (MODERATE)
ELSA-2015-0715
ELSA-2015-0715: openssl security update (MODERATE)
BDU:2015-09824
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ
BDU:2015-09823
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ
BDU:2015-09822
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ
BDU:2015-09821
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ
BDU:2015-09820
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ
SUSE-SU-2015:0553-2
Security update for compat-openssl098
SUSE-SU-2015:0553-1
Security update for compat-openssl098
SUSE-SU-2015:1183-2
Security update for compat-openssl097g
SUSE-SU-2015:0547-1
Security update for compat-openssl097g
SUSE-SU-2015:1183-1
Security update for compat-openssl097g
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
 | CVE-2015-0289 The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. | CVSS2: 5 | 8% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
 | CVE-2015-0289 The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. | CVSS2: 2.6 | 8% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
 | CVE-2015-0289 The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. | CVSS2: 5 | 8% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
| CVE-2015-0289 The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0. ... | CVSS2: 5 | 8% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
| GHSA-cxc6-qvvg-mcqm The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c. | 8% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 4 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
 | SUSE-SU-2015:0541-1 Security update for openssl | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| ELSA-2015-3022 ELSA-2015-3022: openssl-fips security update (MODERATE) | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| ELSA-2015-0800 ELSA-2015-0800: openssl security update (MODERATE) | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| ELSA-2015-0716 ELSA-2015-0716: openssl security and bug fix update (MODERATE) | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| ELSA-2015-0715 ELSA-2015-0715: openssl security update (MODERATE) | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
 | BDU:2015-09824 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ | CVSS2: 7.5 | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
| BDU:2015-09823 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ | CVSS2: 7.5 | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
| BDU:2015-09822 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ | CVSS2: 7.5 | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
| BDU:2015-09821 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ | CVSS2: 7.5 | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
| BDU:2015-09820 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Red Hat Enterprise Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠΈΠ΅ ΡΠ΄Π°Π»Π΅Π½Π½ΠΎΠΌΡ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π½Π°ΡΡΡΠΈΡΡ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΡΡΡ, ΡΠ΅Π»ΠΎΡΡΠ½ΠΎΡΡΡ ΠΈ Π΄ΠΎΡΡΡΠΏΠ½ΠΎΡΡΡ Π·Π°ΡΠΈΡΠ°Π΅ΠΌΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ | CVSS3: 7.3 | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
| SUSE-SU-2015:0553-2 Security update for compat-openssl098 | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| SUSE-SU-2015:0553-1 Security update for compat-openssl098 | Π±ΠΎΠ»ΡΡΠ΅ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| SUSE-SU-2015:1183-2 Security update for compat-openssl097g | ΠΎΠΊΠΎΠ»ΠΎ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| SUSE-SU-2015:0547-1 Security update for compat-openssl097g | ΠΎΠΊΠΎΠ»ΠΎ 11 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| SUSE-SU-2015:1183-1 Security update for compat-openssl097g | ΠΎΠΊΠΎΠ»ΠΎ 14 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ