CVE-2015-1791

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.

References

https://github.com/openssl/openssl/commit/98ece4eebfb6cd45cc8d550c6ac0022965071afc

https://www.openssl.org/news/secadv_20150611.txt

http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html

https://support.apple.com/kb/HT205031

http://marc.info/?l=bugtraq&m=143880121627664&w=2

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131044

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

http://www.securityfocus.com/bid/91787

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763

http://marc.info/?l=bugtraq&m=144050155601375&w=2

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

http://www.securityfocus.com/bid/75161

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733

https://openssl.org/news/secadv/20150611.txt

http://fortiguard.com/advisory/openssl-vulnerabilities-june-2015

http://www.fortiguard.com/advisory/openssl-vulnerabilities-june-2015

http://www-304.ibm.com/support/docview.wss?uid=swg21960041

https://bto.bluecoat.com/security-advisory/sa98

http://www.fortiguard.com/advisory/2015-06-11-fortinet-vulnerability-openssl-vulnerabilities-june-2015

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05353965

https://security.gentoo.org/glsa/201506-02

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc

https://kc.mcafee.com/corporate/index?page=content&id=SB10122

http://rhn.redhat.com/errata/RHSA-2015-1115.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160647.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160436.html

http://www.ubuntu.com/usn/USN-2639-1

http://www.securitytracker.com/id/1032479

http://www.debian.org/security/2015/dsa-3287

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150612-openssl

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

https://support.citrix.com/article/CTX216642

https://www.arista.com/en/support/advisories-notices/security-advisories/1144-security-advisory-11

Details

Source: MITRE

Published: 2015-06-12

Updated: 2021-11-17

Type: CWE-362

Risk Information

CVSS v2

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions up to 0.9.8zf (inclusive)

cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*

cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*

Tenable Plugins

View all (40 total)

IDNameProductFamilySeverity
125001EulerOS Virtualization 3.0.1.0 : openssl (EulerOS-SA-2019-1548)NessusHuawei Local Security Checks
high
106495pfSense < 2.2.3 Multiple Vulnerabilities (SA-15_07) (Logjam)NessusFirewalls
critical
93383Juniper ScreenOS 6.3.x < 6.3.0r22 Multiple Vulnerabilities in OpenSSL (JSA10733)NessusFirewalls
medium
91427Cisco ACE 4710 Appliance / ACE30 Module Multiple Vulnerabilities (Logjam)NessusCISCO
high
90251HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)NessusWeb Servers
high
90150HP System Management Homepage < 7.5.4 Multiple Vulnerabilities (Logjam)NessusWeb Servers
critical
89651openSUSE Security Update : libopenssl0_9_8 (openSUSE-2016-294) (DROWN) (FREAK) (POODLE)NessusSuSE Local Security Checks
critical
8981Mac OS X < 10.10.5 Multiple VulnerabilitiesNessus Network MonitorOperating System Detection
high
86012F5 Networks BIG-IP : OpenSSL vulnerability (K16914)NessusF5 Networks Local Security Checks
medium
85581Splunk Enterprise < 5.0.14 / 6.0.10 / 6.1.9 / 6.2.5 or Splunk Light < 6.2.5 Multiple VulnerabilitiesNessusCGI abuses
medium
85409Mac OS X Multiple Vulnerabilities (Security Update 2015-006)NessusMacOS X Local Security Checks
high
85408Mac OS X 10.10.x < 10.10.5 Multiple VulnerabilitiesNessusMacOS X Local Security Checks
high
84960Puppet Enterprise 3.x < 3.8.1 Multiple Vulnerabilities (Logjam)NessusCGI abuses
critical
84880AIX OpenSSL Advisory : openssl_advisory14.asc (Logjam)NessusAIX Local Security Checks
high
84561SUSE SLES11 Security Update : OpenSSL (SUSE-SU-2015:1184-2) (Logjam)NessusSuSE Local Security Checks
high
84559SUSE SLED11 / SLES11 Security Update : OpenSSL (SUSE-SU-2015:1182-2) (Logjam)NessusSuSE Local Security Checks
high
84548SUSE SLES11 Security Update : OpenSSL (SUSE-SU-2015:1184-1) (Logjam)NessusSuSE Local Security Checks
high
84442SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2015:1150-1) (Logjam)NessusSuSE Local Security Checks
high
84426SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2015:1143-1) (Logjam)NessusSuSE Local Security Checks
high
84414openSUSE Security Update : openssl (openSUSE-2015-447) (Logjam)NessusSuSE Local Security Checks
high
84375Fedora 21 : openssl-1.0.1k-10.fc21 (2015-10108)NessusFedora Local Security Checks
high
84330GLSA-201506-02 : OpenSSL: Multiple vulnerabilities (Logjam)NessusGentoo Local Security Checks
high
8791OpenSSL 0.9.8 < 0.9.8zg / 1.0.0 < 1.0.0s Multiple VulnerabilitiesNessus Network MonitorWeb Servers
medium
8790OpenSSL 1.0.1 < 1.0.1n / 1.0.2 < 1.0.2b Multiple Vulnerabilities (Logjam)Nessus Network MonitorWeb Servers
medium
84301Fedora 22 : openssl-1.0.1k-10.fc22 (2015-10047)NessusFedora Local Security Checks
high
84253Debian DLA-247-1 : openssl security update (Logjam)NessusDebian Local Security Checks
high
84251Amazon Linux AMI : openssl (ALAS-2015-550) (Logjam)NessusAmazon Linux Local Security Checks
high
84226Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20150615)NessusScientific Linux Local Security Checks
high
84204RHEL 6 / 7 : openssl (RHSA-2015:1115)NessusRed Hat Local Security Checks
high
84203OracleVM 3.3 : openssl (OVMSA-2015-0070)NessusOracleVM Local Security Checks
high
84202Oracle Linux 6 / 7 : openssl (ELSA-2015-1115)NessusOracle Linux Local Security Checks
high
84199CentOS 6 / 7 : openssl (CESA-2015:1115)NessusCentOS Local Security Checks
high
84170Debian DSA-3287-1 : openssl - security update (Logjam)NessusDebian Local Security Checks
high
84154OpenSSL 1.0.2 < 1.0.2b Multiple Vulnerabilities (Logjam)NessusWeb Servers
medium
84153OpenSSL 1.0.1 < 1.0.1n Multiple Vulnerabilities (Logjam)NessusWeb Servers
medium
84152OpenSSL 1.0.0 < 1.0.0s Multiple VulnerabilitiesNessusWeb Servers
medium
84151OpenSSL 0.9.8 < 0.9.8zg Multiple VulnerabilitiesNessusWeb Servers
medium
84148Ubuntu 12.04 LTS / 14.04 LTS / 14.10 / 15.04 : openssl vulnerabilities (USN-2639-1)NessusUbuntu Local Security Checks
high
84133FreeBSD : openssl -- multiple vulnerabilities (8305e215-1080-11e5-8ba2-000c2980a9f3) (Logjam)NessusFreeBSD Local Security Checks
high
84126Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssl (SSA:2015-162-01)NessusSlackware Local Security Checks
high