OpenSSL CMS CVE-2015-1792 Denial of Service Vulnerability

Bugtraq ID:	75154
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-1792
Remote:	Yes
Local:	No
Published:	Jun 11 2015 12:00AM
Updated:	May 02 2017 04:06AM
Credit:	Johannes Bauer
Vulnerable:	Ubuntu Ubuntu Linux 15.04 Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 SuSE SUSE Linux Enterprise Server 11 SP1 LTSS SuSE Linux Enterprise Server 11 SP2 LTSS Slackware Slackware Linux 14.1 Slackware Linux x86_64 -current Slackware Linux 14.1 x86_64 Slackware Linux 14.0 x86_64 Slackware Linux 14.0 Slackware Linux 13.37 x86_64 Slackware Linux 13.37 Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux -current S.u.S.E. openSUSE 13.2 S.u.S.E. openSUSE 13.1 Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server EUS 6.6.z Redhat Enterprise Linux Server 7 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node 7 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop 7 Redhat Enterprise Linux Desktop 6 Oracle Secure Backup 10.4 1 Oracle Secure Backup 10.3 3 Oracle Secure Backup 12.1.0.2.0 Oracle Secure Backup 12.1 Oracle Secure Backup 10.4.0.4.0 Oracle Secure Backup 10.3.0.3 Oracle Secure Backup 10.3.0.3 Oracle Secure Backup 10.3.0.2 Oracle Secure Backup 10.3.0.1.0 Oracle Secure Backup 10.2.0.3 Oracle Secure Backup 10.2.0.2 Oracle Secure Backup 10.1.0.3 Oracle Secure Backup 10.1.0.2 Oracle Secure Backup 10.1.0.1 Oracle Primavera P6 Enterprise Project Portfolio Management 8.4 Oracle Primavera P6 Enterprise Project Portfolio Management 8.3 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle PeopleSoft Enterprise PeopleTools 8.54 Oracle PeopleSoft Enterprise PeopleTools 8.53 Oracle Oracle Transportation Management 6.2 Oracle Oracle Transportation Management 6.1 Oracle MySQL Enterprise Backup 4.0.3 Oracle MySQL Enterprise Backup 3.12.3 Oracle HTTP Server 11.5.10.2 Oracle Exalogic Infrastructure EECS 2.0.6.2.3 Oracle Enterprise Session Border Controller Ecz7.3m2p2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Communications Security Gateway 3.0 Oracle Commerce Guided Search 6.5.2 Oracle Commerce Guided Search 6.5.1 Oracle Commerce Guided Search 6.5 Oracle Commerce Guided Search 6.3 Oracle Commerce Guided Search 6.2.2 Oracle Commerce Guided Search 6.4.1.2 Oracle Commerce Experience Manager 6.5.2 Oracle Commerce Experience Manager 6.5.1 Oracle Commerce Experience Manager 6.5 Oracle Commerce Experience Manager 6.3 Oracle Commerce Experience Manager 6.2.2 Oracle Commerce Experience Manager 6.4.1.2 OpenSSL Project OpenSSL 1.0.2 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 1.0.2a OpenSSL Project OpenSSL 1.0.1m OpenSSL Project OpenSSL 1.0.1l OpenSSL Project OpenSSL 1.0.1k OpenSSL Project OpenSSL 1.0.1j OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1b OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0r OpenSSL Project OpenSSL 1.0.0q OpenSSL Project OpenSSL 1.0.0p OpenSSL Project OpenSSL 1.0.0o OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0m OpenSSL Project OpenSSL 1.0.0L OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0H OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 0.9.8zf OpenSSL Project OpenSSL 0.9.8ze OpenSSL Project OpenSSL 0.9.8zd OpenSSL Project OpenSSL 0.9.8zc OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8za OpenSSL Project OpenSSL 0.9.8y OpenSSL Project OpenSSL 0.9.8X OpenSSL Project OpenSSL 0.9.8w OpenSSL Project OpenSSL 0.9.8U OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8 f OpenSSL Project OpenSSL 0.9.8v Juniper Junos 15.1X49-D10 Juniper Junos 15.1R1 Juniper Junos 14.2R3 Juniper Junos 14.2R2 Juniper Junos 14.2R1 Juniper Junos 14.1R5 Juniper Junos 14.1R4 Juniper Junos 14.1R3 Juniper JUNOS 14.1R2 Juniper Junos 13.3R6 Juniper Junos 13.3R5 Juniper Junos 13.3R4 Juniper Junos 13.2X51-D30 Juniper Junos 13.2X51-D26 Juniper Junos 13.2X51-D25 Juniper Junos 13.2X51-D20 Juniper Junos 13.2X51-D15 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D10 Juniper Junos 12.3R9 Juniper Junos 12.3R7 Juniper Junos 12.3R6 Juniper Junos 12.3R3 Juniper JUNOS 12.3R2 Juniper Junos 12.3R10 Juniper Junos 12.1X47-D20 Juniper Junos 12.1X47-D15 Juniper Junos 12.1X47-D11 Juniper Junos 12.1X47-D10 Juniper Junos 12.1x47 Juniper Junos 12.1X46-D36 Juniper Junos 12.1X46-D35 Juniper Junos 12.1X46-D30 Juniper Junos 12.1X46-D25 Juniper JUNOS 12.1X46-D25 Juniper Junos 12.1X46-D20 Juniper Junos 12.1X46-D15 Juniper Junos 12.1X46-D10 Juniper Junos 12.1X46 D25 Juniper Junos 12.1X44-D51 Juniper Junos 12.1X44-D50 Juniper JUNOS 12.1X44-D40 Juniper Junos 12.1X44-D35.5 Juniper Junos 12.1X44-D35 Juniper Junos 12.1X44-D34 Juniper Junos 12.1X44-D33 Juniper Junos 12.1X44-D32 Juniper Junos 12.1X44-D30.4 Juniper Junos 12.1X44-D30 Juniper Junos 12.1X44-D26 Juniper JUNOS 12.1X44-D25 Juniper JUNOS 12.1X44-D20 (SRX) Juniper JUNOS 12.1X44-D20 Juniper Junos 12.1X44-D20 Juniper JUNOS 12.1X44-D15 Juniper JUNOS 12.1X44 D40 Juniper JUNOS 12.1X44 D35 Juniper Junos 12.1X44 D30 Juniper JUNOS 12.1X44 D25 Juniper Junos 12.1X44 D20 Juniper Junos 12.1X44 D10 IBM Workload Deployer 3.1 7 IBM Workload Deployer 3.1 6 IBM Workload Deployer 3.1 2 IBM Workload Deployer 3.1 1 IBM Workload Deployer 3.1 IBM Worklight Foundation Enterprise Edition 6.2 0 IBM Worklight Foundation Enterprise Edition 6.2.0.1 IBM Worklight Foundation Consumer Edition 6.2 0 IBM Worklight Foundation Consumer Edition 6.2.0.1 IBM Worklight Enterprise Edition 6.1.0.2 IBM Worklight Enterprise Edition 6.1.0.1 IBM Worklight Enterprise Edition 6.1.0.0 IBM Worklight Consumer Edition 6.1.0.2 IBM Worklight Consumer Edition 6.1.0.1 IBM Worklight Consumer Edition 6.1.0.0 IBM Workflow for Bluemix 0 IBM WebSphere MQ 8.0.0.3 IBM WebSphere MQ 8.0.0.2 IBM WebSphere MQ 8.0.0.1 IBM WebSphere MQ 8.0.0.0 IBM Tivoli Workload Scheduler for Applications 8.6 IBM Tivoli Workload Scheduler for Applications 8.5 FP01 IBM Tivoli Workload Scheduler for Applications 8.5 IBM Tivoli Workload Scheduler for Applications 8.4 FP02 IBM Tivoli Workload Scheduler for Applications 8.4 IBM Tivoli Common Reporting 3.1.2 IBM Tivoli Common Reporting 2.1.1 IBM Tivoli Common Reporting 3.1.0.2 IBM Tivoli Common Reporting 3.1.0.1 IBM Tivoli Common Reporting 3.1 IBM Tivoli Common Reporting 2.1.1.2 IBM Tivoli Common Reporting 2.1 IBM System Networking RackSwitch G8332 7.7.20.0 IBM System Networking RackSwitch G8316 7.9.14.0 IBM System Networking RackSwitch G8264T 7.9.14.0 IBM System Networking RackSwitch G8264CS 7.8.11.0 IBM System Networking RackSwitch G8264 7.9.14.0 IBM System Networking RackSwitch G8264 7.11.4.0 IBM System Networking RackSwitch G8124-E 7.11.4.0 IBM System Networking RackSwitch G8124 7.11.4.0 IBM System Networking RackSwitch G8052 7.9.14.0 IBM System Networking RackSwitch G8052 7.11.4.0 IBM Storwize V7000 Unified 1.5.2.1 IBM Storwize V7000 Unified 1.5.2.0 IBM Storwize V7000 Unified 1.5.1.3 IBM Storwize V7000 Unified 1.5.1.0 IBM Storwize V7000 Unified 1.5.0.2 IBM Storwize V7000 Unified 1.5.0.1 IBM Storwize V7000 Unified 1.5.0.0 IBM Sterling Connect:Direct for HP NonStop 3.6 IBM Sterling Connect:Direct for HP NonStop 3.5.1 IBM Sterling Connect:Direct for HP NonStop 3.5 IBM Sterling B2B Integrator 5.2 IBM SONAS 1.5.2.1 IBM SONAS 1.5.2.0 IBM SONAS 1.5.1.3 IBM SONAS 1.5.0.2 IBM SONAS 1.5.0.1 IBM SONAS 1.5.0.0 IBM SmartCloud Provisioning 2.1 IBM SmartCloud Entry 3.2 fix pack 13 IBM SmartCloud Entry 3.2 Fix Pack 11 IBM SmartCloud Entry 3.2 IBM SmartCloud Entry 3.2.0.4 FixPack 13 IBM SmartCloud Entry 3.2.0.4 fix pack 11 IBM SmartCloud Entry 3.2.0.4 IBM SmartCloud Entry 3.2.0.3 IBM SmartCloud Entry 3.2.0.2 IBM SmartCloud Entry 3.2.0.1 IBM SmartCloud Entry 3.2.0.0 IBM SmartCloud Entry 3.2.0 fix pack 9 IBM SmartCloud Entry 3.2.0 fix pack 8 IBM SmartCloud Entry 3.2.0 fix pack 10 IBM Security Proventia Network Enterprise Scanner 2.3 IBM Security Privileged Identity Manager 2.0.1 IBM Security Privileged Identity Manager 2.0 IBM Security Privileged Identity Manager 1.0.1.1 IBM Security Privileged Identity Manager 1.0.1 IBM Security Network Controller 1.0.3387 IBM Security Network Controller 1.0.3381 IBM Security Network Controller 1.0.3379 IBM Security Network Controller 1.0.3376 IBM Security Network Controller 1.0.3361 IBM Security Network Controller 1.0.1768 IBM Security Network Controller 1.0.1209 IBM Security Network Controller 1.0.913 IBM Security Network Controller 1.0.3387M IBM Security Network Controller 1.0.3381M IBM Security Network Controller 1.0.3379M IBM Security Network Controller 1.0.3376M IBM Security Network Controller 1.0.3361M IBM Security Network Controller 1.0.3352M IBM Security Network Controller 1.0.3350M IBM Security Identity Manager Virtual Appliance 7.0 IBM Security Identity Governance 5.1.1 IBM Security AppScan Enterprise 9.0.2 IBM Security AppScan Enterprise 9.0 0 IBM Security AppScan Enterprise 9.0.1 IBM Security AppScan Enterprise 9.0 IBM Security Access Manager for Mobile 8.0 IBM SDK for Node.js for Bluemix 0.12.4 IBM SDK for Node.js for Bluemix 0.10.38 IBM SDK for Node.js 1.2.0.2 IBM SDK for Node.js 1.1.0.9 IBM SDK for Node.js 1.1.0.7 IBM SDK for Node.js 1.1.0.6 IBM SDK for Node.js 1.1.0.5 IBM SDK for Node.js 1.1.0.3 IBM SDK for Node.js 1.1.0.2 IBM SDK for Node.js 1.1.0.14 IBM SDK for Node.js 1.1.0.13 IBM SDK for Node.js 1.1.0.12 IBM SDK for Node.js 1.1 IBM Sametime 9.0.0.1 IBM Rational Team Concert 5.0.1 IBM Rational Team Concert 4.0.5 IBM Rational Team Concert 4.0.4 IBM Rational Team Concert 4.0.3 IBM Rational Team Concert 4.0.2 IBM Rational Team Concert 4.0.1 IBM Rational Team Concert 3.0.6 IBM Rational Team Concert 3.0.5 IBM Rational Team Concert 3.0.4 IBM Rational Team Concert 3.0.3 IBM Rational Team Concert 3.0.2 IBM Rational Team Concert 3.0.1 6 IBM Rational Team Concert 3.0.1 .2 IBM Rational Team Concert 6.0 IBM Rational Team Concert 5.0.2 IBM Rational Team Concert 5.0 IBM Rational Team Concert 4.0.6 IBM Rational Team Concert 4.0.0.2 IBM Rational Team Concert 4.0.0.1 IBM Rational Team Concert 4.0 IBM Rational Team Concert 3.0.1.5 IBM Rational Team Concert 3.0.1.4 IBM Rational Team Concert 3.0.1.3 IBM Rational Team Concert 3.0.1.1 IBM Rational Team Concert 3.0.1 IBM Rational Team Concert 3.0 IBM Rational Software Architect for WebSphere Software 9.1.1 IBM Rational Software Architect for WebSphere Software 9.1.2 IBM Rational Software Architect for WebSphere Software 9.1 IBM Rational Software Architect for Websphere 9.1 IBM Rational Software Architect 9.1.1 IBM Rational Software Architect 9.1 IBM Rational Policy Tester 8.5 IBM Rational Insight 1.1.1 3 IBM Rational Insight 1.1.1 2 IBM Rational Insight 1.1.1 1 IBM Rational Insight 1.1.1 IBM Rational Insight 1.1.1.7 IBM Rational Insight 1.1.1.6 IBM Rational Insight 1.1.1.5 IBM Rational Insight 1.1.1.4 IBM Rational Developer for i 9.1.1 IBM Rational Developer for i 9.1.1.1 IBM Rational Developer for i 9.1 IBM Rational Application Developer for WebSphere Software 9.1.1 IBM Rational Application Developer for WebSphere Software 9.1.0.1 IBM Rational Application Developer for WebSphere Software 9.1 IBM QRadar SIEM 7.2.4 Patch 3 IBM QRadar SIEM 7.2.4 Patch 1 IBM QRadar SIEM 7.2.3 Patch 4 IBM QRadar SIEM 7.2.3 IBM QRadar SIEM 7.2 MR3 IBM QRadar SIEM 7.2 MR2 IBM QRadar SIEM 7.1 MR2 Patch 9 IBM QRadar SIEM 7.1 MR2 Patch 8 IBM QRadar SIEM 7.1 MR2 IBM QRadar SIEM 7.1 MR1 IBM QRadar Incident Forensics 7.2.4 Patch 1 IBM QRadar Incident Forensics 7.2.2 IBM QRadar Incident Forensics 7.2 MR3 IBM QRadar Incident Forensics 7.2 MR2 IBM PredictiveInsight 9.0 IBM PredictiveInsight 8.6 IBM PredictiveInsight 8.5 IBM PredictiveInsight 8.3 IBM PredictiveInsight 8.2 IBM PredictiveInsight 8.1 IBM PredictiveInsight 8.0 IBM PowerKVM 2.1 IBM Power HMC 8.3.0.0 IBM Power HMC 8.2.0.0 IBM Power HMC 8.1.0.0 IBM Power HMC 7.9.0.0 IBM Power HMC 7.8.0.0 IBM Power HMC 7.3.0.0 IBM NetInsight 8.6.0.14 IBM NetInsight 8.6.0 IBM MobileFirst Platform Foundation 7.0.0.0 IBM MobileFirst Platform Foundation 6.3.0.0 IBM Messagesight 1.2.0.1 IBM Messagesight 1.2 IBM Messagesight 1.1 IBM Initiate Master Data Service Provider Hub 9.7 IBM Initiate Master Data Service Provider Hub 9.5 IBM Initiate Master Data Service Patient Hub 9.7 IBM Initiate Master Data Service Patient Hub 9.5 IBM Initiate Master Data Service 9.7 IBM Initiate Master Data Service 9.5 IBM Initiate Master Data Service 9.2 IBM Initiate Master Data Service 9.0 IBM Initiate Master Data Service 8.1 IBM Initiate Master Data Service 10.1 IBM Initiate Master Data Service 10.0 IBM InfoSphere Master Data Management Standard/Advanced Edition 11.4 IBM InfoSphere Master Data Management Standard/Advanced Edition 11.3 IBM InfoSphere Master Data Management Standard/Advanced Edition 11.0 IBM InfoSphere Master Data Management Provider Hub 10.0 IBM InfoSphere Master Data Management Patient Hub 10.0 IBM InfoSphere Information Server 9.1 IBM InfoSphere Information Server 8.7 IBM InfoSphere Information Server 8.5 IBM InfoSphere Information Server 8.1 IBM InfoSphere Information Server 11.3 IBM InfoSphere Guardium for Applications 10.0 IBM InfoSphere Guardium 9.5 IBM InfoSphere Guardium 9.1 IBM InfoSphere Guardium 9.0 IBM InfoSphere Guardium 8.2 IBM i V5R4 7.2 IBM i V5R4 7.1 IBM i V5R4 6.1 IBM i V5R3 7.2 IBM i V5R3 7.1 IBM i V5R3 6.1 IBM General Parallel File System (GPFS) 3.5.0 IBM FileNet System Monitor 4.5 IBM Enterprise Content Management System Monitor 5.2 IBM Enterprise Content Management System Monitor 5.1 IBM DS8870 R7.5 IBM DataPower Gateways 7.2.0.0 IBM DataPower Gateways 7.1.0.5 IBM DataPower Gateways 7.0.0.8 IBM DataPower Gateways 6.0.1.11 IBM DataPower Gateways 6.0.0.15 IBM ContactOptimization 9.1.1 IBM ContactOptimization 9.1 IBM ContactOptimization 9.0 IBM ContactOptimization 8.6 IBM ContactOptimization 8.5 IBM ContactOptimization 8.3 IBM ContactOptimization 8.2 IBM ContactOptimization 8.1 IBM ContactOptimization 8.0 IBM Cognos Metrics Manager 10.2.2 IBM Cognos Metrics Manager 10.2.1 IBM Cognos Metrics Manager 10.1.1 IBM Cognos Metrics Manager 10.2 IBM Cognos Metrics Manager 10.1 IBM Cognos Insight 10.2.2 IBM Cognos Insight 10.2.1 IBM Cognos Insight 10.2 IBM Cloud Manager 4.3 IBM Cloud Manager 4.2 IBM Cloud Manager 4.1 IBM Cloud Manager 4.3.0.1 IBM Cloud Manager 4.2.0.2 IBM Cloud Manager 4.2.0.1 IBM Cloud Manager 4.1.0.4 IBM Cloud Manager 4.1.0.3 IBM Cloud Manager 4.1.0.2 IBM Cloud Manager 4.1.0.1 IBM Campaign 9.1.1 IBM Campaign 9.1 1 IBM Campaign 9.1 0 IBM Campaign 9.1 IBM Campaign 9.1.0.4 IBM Campaign 9.1 IBM Campaign 9.0 IBM Campaign 8.6 IBM Campaign 8.5 IBM Campaign 8.3 IBM Campaign 8.2 IBM Campaign 8.1 IBM Campaign 8.0 IBM BuildForge 7.1.3 IBM BuildForge 7.1.2 IBM BuildForge 8.0.0.2 IBM BuildForge 8.0.0.1 IBM BuildForge 8.0 IBM BuildForge 7.1.3.6 IBM BuildForge 7.1.3.5 IBM BuildForge 7.1.3.4 IBM BuildForge 7.1.3.3 IBM BuildForge 7.1.3.2 IBM BuildForge 7.1.3.1 IBM BuildForge 7.1.2.3 IBM BuildForge 7.1.2.2 IBM BuildForge 7.1.2.1 IBM ABYP-4TS-P-M 0 IBM ABYP-4TS-P 0 IBM ABYP-4TL-P-M 0 IBM ABYP-4TL-P 0 IBM ABYP-4T-0S-0L-P-M 0 IBM ABYP-4T-0S-0L-P 0 IBM ABYP-2T-2S-0L-P-M 0 IBM ABYP-2T-2S-0L-P 0 IBM ABYP-2T-1S-1L-P-M 0 IBM ABYP-2T-1S-1L-P 0 IBM ABYP-2T-0S-2L-P-M 0 IBM ABYP-2T-0S-2L-P 0 IBM ABYP-10G-4SR-1-P-M 0 IBM ABYP-10G-4SR-1-P 0 IBM ABYP-10G-4LR-1-P-M 0 IBM ABYP-10G-4LR-1-P 0 IBM ABYP-10G-2SR-2LR-1-P-M 0 IBM ABYP-10G-2SR-2LR-1-P 0 IBM ABYP-0T-4S-0L-P-M 0 IBM ABYP-0T-4S-0L-P 0 IBM ABYP-0T-2S-2L-P-M 0 IBM ABYP-0T-2S-2L-P 0 IBM ABYP-0T-0S-4L-P-M 0 IBM ABYP-0T-0S-4L-P 0 HP Virtual Connect Enterprise Manager 6.2 HP Virtual Connect Enterprise Manager 6.1 HP Virtual Connect Enterprise Manager 6.0 HP Version Control Repository Manager 7.4.1 HP Version Control Repository Manager 7.4 HP Version Control Repository Manager 7.3.4 HP Version Control Repository Manager 7.3.1 HP Version Control Repository Manager 7.3 HP Version Control Repository Manager 7.2.2 HP Version Control Repository Manager 7.2.1 HP Version Control Repository Manager 7.2 HP Version Control Repository Manager 7.5.1 HP Version Control Repository Manager 7.5.0 HP Version Control Repository Manager 7.4.0a HP Version Control Repository Manager 7.3.3 HP Version Control Repository Manager 7.3.2 HP Version Control Agent 7.3.5 HP Version Control Agent 7.3.4 HP Version Control Agent 7.3.3 HP Version Control Agent 7.3.1 HP Version Control Agent 7.3 HP Version Control Agent 7.2.2 HP Version Control Agent 7.2.1 HP Version Control Agent 7.2 HP Version Control Agent 2.1.5 HP Version Control Agent 7.3.2 HP VCX products 0 HP Systems Insight Manager 7.1.1 HP Systems Insight Manager 7.5.0 HP Systems Insight Manager 7.4 HP Systems Insight Manager 7.3.2 HP Systems Insight Manager 7.3.1 HP Systems Insight Manager 7.3 HP Systems Insight Manager 7.2.2 HP Systems Insight Manager 7.2.1 HP Systems Insight Manager 7.2 HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 HP System Management Homepage 7.5.4 HP System Management Homepage 7.5 HP System Management Homepage 7.4.1 HP System Management Homepage 7.3.2 HP System Management Homepage 7.2.3 HP System Management Homepage 7.2.2 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1.2 HP System Management Homepage 7.1.1 HP System Management Homepage 6.2.2 7 HP System Management Homepage 3.2.7 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.15 HP System Management Homepage 2.1.12 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP System Management Homepage 7.4 HP System Management Homepage 7.3.3.1 HP System Management Homepage 7.3.1 HP System Management Homepage 7.3 HP System Management Homepage 7.2.4.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1 HP System Management Homepage 7.0 HP System Management Homepage 6.3.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2.0 HP System Management Homepage 6.2 HP System Management Homepage 6.0 HP System Management Homepage 3.2.2 HP System Management Homepage 3.0.1 HP Server Migration Pack 7.5 HP Operations Agent 12.0 HP Operations Agent 11.14 HP Operations Agent 11.13 HP Operations Agent 11.12 HP Operations Agent 11.11 HP Operations Agent 11.10 HP Operations Agent 11.05 HP Operations Agent 11.03 HP Operations Agent 11.02 HP Operations Agent 11.01 HP Operations Agent 11.0 HP Matrix Operating Environment 7.5 HP Matrix Operating Environment 7.4 HP Matrix Operating Environment 7.3.2 HP Matrix Operating Environment 7.3.1 HP Matrix Operating Environment 7.3 HP Matrix Operating Environment 7.2.2 HP Matrix Operating Environment 7.2.1 HP Matrix Operating Environment 7.2 HP Insight Orchestration 6.2 HP Insight Orchestration 6.1 HP Insight Orchestration 6.0 HP Insight Control server provisioning 7.4.1 HP Insight Control server provisioning 7.5.0 HP Insight Control server provisioning 7.4.0 HP Insight Control 7.5 HP Insight Control 7.4 HP Insight Control 7.3 HP Insight Control 7.2 HP iMC products 0 HP IceWall SSO Dfw 10.0 HP IceWall SSO Certd 10.0 HP IceWall SSO Agent Option 10 HP IceWall MCRP 3.0 HP IceWall Federation Agent 3.0 HP HP-UX B.11.31 HP HP-UX B.11.23.1.007 HP HP-UX B.11.23.07.04 HP HP-UX B.11.23 HP HP-UX B.11.23 HP HP-UX B.11.22 HP HP-UX B.11.11.17.02 HP HP-UX B.11.11.16.09 HP HP-UX B.11.11.15.13 HP HP-UX B.11.11.14.15 HP HP-UX B.11.11.13.14 HP HP-UX B.11.11.02.008 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP Comware 7 products 0 HP Comware 5 products 0 Gentoo Linux Fortinet FSSO build 235 Fortinet FortiWeb 5.3.3 Fortinet FortiVoice Enterprise 3.0.6 Fortinet FortiSandbox 2.0 Fortinet FortiRecorder 2.0.1 Fortinet Fortios 5.0.8 Fortinet Fortios 5.2.0 Fortinet Fortios 4.3.16 Fortinet FortiManager 5.0.9 Fortinet FortiMail 4.3.10 Fortinet FortiDDoS 4.1.5 Fortinet FortiClient Windows/MAC 5.2.3 Fortinet FortiClient iOS 5.2.1 Fortinet FortiClient Android 5.2.6 Fortinet FortiCache 3.0 Fortinet FortiAuthenticator 3.1 Fortinet FortiAP 5.0.8 Fortinet FortiAnalyzer 5.0.9 Fortinet FortiADC 4.2 Fortinet AscenLink 7.2.3 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler T1 0 Citrix NetScaler Service Delivery Appliance 0 Citrix NetScaler Gateway 0 Citrix NetScaler Application Delivery Controller (ADC) 0 Citrix Command Center Appliance 0 Citrix CloudBridge 0 CentOS CentOS 7 Avaya Session Border Controller for Enterprise 6.3.0 Avaya one-X Client Enablement Services 6.2 SP2 Avaya one-X Client Enablement Services 6.2 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Server Edition 8.0 Avaya IP Office Application Server 9.0 SP 2 Avaya IP Office Application Server 9.0 SP 1 Avaya IP Office Application Server 9.0 Avaya CMS r17 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.3.3 Avaya Aura Session Manager 6.3 Avaya Aura Experience Portal 6.0.2 Avaya Aura Experience Portal 6.0.1 Avaya Aura Experience Portal 7.0 Avaya Aura Experience Portal 6.0 SP2 Avaya Aura Experience Portal 6.0 SP1 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 8.0 SP2 Avaya Aura Conferencing 8.0 SP1 Avaya Aura Conferencing 8.0 Avaya Aura Collaboration Environment 3.0 Avaya Aura Collaboration Environment 2.0 Apple Mac OS X 10.9.5 Apple Mac OS X 10.8.5 Apple Mac Os X 10.10.4 Apple Mac Os X 10.10.3 Apple Mac OS X 10.10.2 Apple Mac OS X 10.10.1 Apple Mac OS X 10.10 AlienVault Unified Security Management (USM) 5.0.3 AlienVault Unified Security Management (USM) 5.0 AlienVault Unified Security Management (USM) 4.15 AlienVault Unified Security Management (USM) 4.14 AlienVault Unified Security Management (USM) 4.0 AlienVault Open Source SIEM (OSSIM) 5.0.3 AlienVault Open Source SIEM (OSSIM) 5.0.1 AlienVault Open Source SIEM (OSSIM) 4.7 AlienVault Open Source SIEM (OSSIM) 4.6.1 AlienVault Open Source SIEM (OSSIM) 4.5 AlienVault Open Source SIEM (OSSIM) 4.3.3 AlienVault Open Source SIEM (OSSIM) 4.3.2 AlienVault Open Source SIEM (OSSIM) 4.3.1 AlienVault Open Source SIEM (OSSIM) 4.0.2 AlienVault Open Source SIEM (OSSIM) 5.0 AlienVault Open Source SIEM (OSSIM) 4.8.0 AlienVault Open Source SIEM (OSSIM) 4.6.0 AlienVault Open Source SIEM (OSSIM) 4.3.3.1 AlienVault Open Source SIEM (OSSIM) 4.3.0 AlienVault Open Source SIEM (OSSIM) 4.2.3 AlienVault Open Source SIEM (OSSIM) 4.15 AlienVault Open Source SIEM (OSSIM) 4.14 AlienVault Open Source SIEM (OSSIM) 4.13 AlienVault Open Source SIEM (OSSIM) 4.1.2 AlienVault Open Source SIEM (OSSIM) 4.1 AlienVault Open Source SIEM (OSSIM) 4.0 AlienVault Open Source SIEM (OSSIM) 3.1
Not Vulnerable:	Oracle Secure Backup 12.1.0.3 OpenSSL Project OpenSSL 1.0.2b OpenSSL Project OpenSSL 1.0.1n OpenSSL Project OpenSSL 1.0.0s OpenSSL Project OpenSSL 0.9.8zg Juniper Junos 15.1X49-D20 Juniper Junos 15.1R2 Juniper Junos 14.2R4 Juniper Junos 14.1R6 Juniper Junos 13.3R7 Juniper Junos 13.2X51-D40 Juniper Junos 12.3X48-D30 Juniper Junos 12.3X48-D20 Juniper Junos 12.3R11 Juniper Junos 12.1X47-D45 Juniper Junos 12.1X47-D25 Juniper Junos 12.1X46-D55 Juniper Junos 12.1X46-D40 Juniper Junos 12.1X44-D55 IBM Workload Deployer 3.1.0.7 IF9 IBM WebSphere MQ 8.0.0.4 IBM System Networking RackSwitch G8332 7.7.21.0 IBM System Networking RackSwitch G8316 7.9.15.0 IBM System Networking RackSwitch G8264T 7.9.15.0 IBM System Networking RackSwitch G8264CS 7.8.12.0 IBM System Networking RackSwitch G8264 7.9.15.0 IBM System Networking RackSwitch G8264 7.11.5.0 IBM System Networking RackSwitch G8124-E 7.11.5.0 IBM System Networking RackSwitch G8124 7.11.5.0 IBM System Networking RackSwitch G8052 7.9.15.0 IBM System Networking RackSwitch G8052 7.11.5.0 IBM Storwize V7000 Unified 1.5.2.2 IBM SONAS 1.5.2.2 IBM SmartCloud Entry 3.2 fix pack 14 IBM SDK for Node.js 1.2.0.3 IBM SDK for Node.js 1.1.0.15 IBM PowerKVM 2.1.1 build 57 IBM FileNet System Monitor 4.5.0.3 Interim Fix IBM Enterprise Content Management System Monitor 5.2.0 Fix Pack 2 IBM Enterprise Content Management System Monitor 5.1.0.3 Interim Fix IBM DataPower Gateways 7.2.0.1 IBM DataPower Gateways 7.1.0.6 IBM DataPower Gateways 7.0.0.9 IBM DataPower Gateways 6.0.1.12 IBM DataPower Gateways 6.0.0.16 IBM Cognos Insight Standard Edition 10.2.2 FP 4 IBM Cognos Insight Standard Edition 10.2.1 FP 2 IF 4 IBM Cognos Insight Standard Edition 10.2 FP 1 IF 4 IBM BuildForge 8.0.0.2 iFix 8 IBM BuildForge 7.1.3.6 iFix 6 IBM BuildForge 7.1.2.3 iFix 7 HP Virtual Connect Enterprise Manager SDK 7.5.0 HP Version Control Repository Manager 7.5.1 HP Version Control Repository Manager 7.5.0 HP Version Control Agent 7.5.0 HP Systems Insight Manager 7.5.1 HP Systems Insight Manager 7.5.0 HP System Management Homepage 7.5.5 HP System Management Homepage 7.5 HP Server Migration Pack 7.5.1 HP Operations Agent 12.01 HP Operations Agent 11.15 HP Matrix Operating Environment 7.5.1 HP Insight Orchestration 7.5.0 HP Insight Control server provisioning 7.5.1 HP Insight Control 7.5.1 Apple Mac Os X 10.10.5 AlienVault Unified Security Management (USM) 5.0.4 AlienVault Open Source SIEM (OSSIM) 5.0.4

OpenSSL CMS CVE-2015-1792 Denial of Service Vulnerability

OpenSSL is prone to denial-of-service vulnerability.

An attacker may exploit this issue to cause a denial-of-service condition.

The following are vulnerable:

OpenSSL 1.0.2 prior to 1.0.2b
OpenSSL 1.0.1 prior to 1.0.1n
OpenSSL 1.0.0 prior to 1.0.0s
OpenSSL 0.9.8 prior to 0.9.8zg

OpenSSL CMS CVE-2015-1792 Denial of Service Vulnerability

An attacker can use readily available tools to exploit this issue.

OpenSSL CMS CVE-2015-1792 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Slackware Linux 14.0 x86_64

• Slackware openssl-1.0.1n-x86_64-1_slack14.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/package s/openssl-1.0.1n-x86_64-1_slack14.0.txz


• Slackware openssl-solibs-1.0.1n-x86_64-1_slack14.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/package s/openssl-solibs-1.0.1n-x86_64-1_slack14.0.txz

OpenSSL CMS CVE-2015-1792 Denial of Service Vulnerability

References:

• OpenSSL Homepage (OpenSSL)
  
• PowerKVM is affected by OpenSSL vulnerabilities (multiple CVEs) (IBM)
  
• Vulnerability in OpenSSL affects IBM Security Proventia Network Enterprise Scan (IBM)
  
• [security bulletin] HPSBUX03388 SSRT102180 rev.1 - HP-UX running OpenSSL, Remote (HP)
  
• 2015-10 Security Bulletin: Junos: OpenSSL June-July 2015 advisories (Juniper)
  
• APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 (Apple)
  
• cpujul2016: Oracle Critical Patch Update Advisory - July 2016 (Oracle)
  
• Critical Patch Security Advisory - October 2016 (Oracle)
  
• CTX216642 Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Li (Citrix)
  
• HPSBGN03371 rev.1 - HP IceWall Products running OpenSSL, Remote Denial of Servic (HP)
  
• HPSBGN03678 rev.1 - HPE Operations Agent using OpenSSL 1.0.1p, Remote Denial of (HP)
  
• HPSBHF03613 rev.1 - HPE Network Products including iMC, VCX, and Comware using O (HP)
  
• HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and (Seclist)
  
• HPSBMU03589 rev.1 - HPE Version Control Repository Manager (VCRM), Remote Denial (HP)
  
• HPSBMU03611 rev.1 - HPE Matrix Operating Environment on Windows and Linux, Multi (HP)
  
• HPSBMU03612 rev.1 - HPE Insight Control on Windows and Linux, Multiple Remote Vu (HP)
  
• IBM Advisory isg3T1022527 (IBM)
  
• IBM Advisory isg3T1022724 (IBM)
  
• IBM Advisory ssg1S1005313 (IBM)
  
• IBM Advisory swg21961837 (IBM)
  
• IBM Advisory swg21962520 (IBM)
  
• IBM Advisory swg21963232 (IBM)
  
• IBM Advisory swg21963954 (IBM)
  
• IBM Advisory swg21965415 (IBM)
  
• IBM Advisory swg21966484 (IBM)
  
• isg3T1022655 : Vulnerabilities in OpenSSL affect IBM SmartCloud Entry (CVE-2014- (IBM)
  
• MIGR-5098801: Security Bulletin: Vulnerabilities in OpenSSL affect IBM System Ne (IBM)
  
• Multiple Vulnerabilities in OpenSSL (June 2015) Affecting Cisco Products (Cisco)
  
• OpenSSL Security Advisory [11 Jun 2015] (OpenSSL Project)
  
• openssl security update (Red Hat)
  
• openssl security update (RHSA-2015-1115) (Avaya)
  
• OpenSSL vulnerabilities - June 2015 (Fortinet)
  
• Oracle Critical Patch Update Advisory - April 2017 (Oracle)
  
• Oracle Critical Patch Update Advisory - January 2016 (Oracle)
  
• Oracle Critical Patch Update Advisory - January 2017 (Oracle)
  
• Security Advisory - AlienVault v5.0.4 addresses 31 vulnerabilities (AlienVault)
  
• Security Bulletin: IBM Security AppScan Enterprise is affected by multiple vulne (IBM)
  
• Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected b (IBM)
  
• Security Bulletin: Multiple Security Vulnerabilities Fixed in IBM Security Privi (IBM)
  
• Security Bulletin: Multiple vulnerabilities impact DS8000 HMC (IBM)
  
• Security Bulletin: Vulnerabilities in Open SSL affect Power Hardware Management (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cloud Manager with Open (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos Metrics Manager (IBm)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Master Data (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2015- (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Proventia Network Active By (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Rational BuildForge (CVE-20 (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affected IBM Workflow for Bluemix (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM i (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM Mobile (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM QRadar (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM Securi (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM Securi (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM? SDK f (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM® SDK f (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Rational A (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Rational I (IBM)
  
• Security Bulletin:Vulnerabilities in OpenSSL affect Tivoli Workload Scheduler Ap (IBM)
  
• ssg1S1005314: Vulnerabilities in OpenSSL affect IBM Storwize V7000 Unified (CVE- (IBM)
  
• swg21963498 : Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSpher (IBM)
  
• swg21966481: Multiple vulnerabilities in OpenSSL affect IBM Campaign, IBM Contac (IBM)
  
• swg21966847: Security Bulletin: Multiple vulnerabilities in openssl affect IBM S (IBM)
  
• swg21966873 : Security Bulletin: Vulnerabilities in OpenSSL including Logjam aff (IBM)
  
• swg21967384 Security Bulletin: Multiple vulnerability in Product IBM Tivoli (IBM)
  
• swg21968046: Security Bulletin: Vulnerabilities in OpenSSL affect IBM FileNet Sy (IBM)
  
• swg21968724: Security Bulletin: Vulnerabilities in OpenSSL affect IBM? Rational (IBM)
  
• swg21968871: Vulnerability in OpenSSL affects IBM Security Proventia Network Ent (IBM)
  
• swg21970020 : Multiple vulnerabilities in OpenSSL affect IBM PredictiveInsight (IBM)
  
• swg21970103: Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere (IBM)
  
• swg21970667: Security Bulletin: Community Server 9 HF1 and version 9 Limited Use (IBM)
  
• Vulnerabilities in OpenSSL affect IBM Security Network Controller (CVE-2014-8176 (IBM)
  
• Vulnerabilities in OpenSSL affect Sterling Connect:Direct for HP NonStop (CVE-20 (IBM)
  
• Vulnerabilities in OpenSSLincluding Logjam affect IBM Workload Deployer. (CVE-20 (IBM)