CVE-2015-0206

CVE-2015-0206

Published · Updated

Follow this CVE+ Monitor openssl

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 57%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product
Red Hat Storage 2
none_available: Affected
Fixed
16 products (144 components)
Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Enterprise Linux Server Optional (v. 6) · Red Hat Enterprise Linux Desktop Optional (v. 6) · and others 11
fix ↗
Not affected
6 products (9 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 5 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7 · Red Hat JBoss Enterprise Application Platform 6 · Red Hat JBoss Enterprise Web Server 1 · and others 1
Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.
Affected products
n/a · n/a