CVE - CVE - 2015 - 0204

CVE-ID
cve - 2015 - 0204	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
在s3_clnt ssl3_get_key_exchange函数。c OpenSSL 0.9.8zd之前,1.0.0 1.0.0p之前,和1.0.1 1.0.1k允许远程SSL服务器进行RSA-to-EXPORT_RSA降级攻击和促进强力解密提供短暂的疲软RSA密钥不合规的作用,有关“反常”的问题。注意:这个CVE的范围只是基于OpenSSL客户机代码,不是EXPORT_RSA问题与服务器或其他TLS实现有关。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
苹果:苹果- sa - 2015 - 04 - 08 - 2 URL: http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html 报价:71936 URL: http://www.securityfocus.com/bid/71936 报价:91787 URL: http://www.securityfocus.com/bid/91787 思科:20150310多个漏洞OpenSSL(2015年1月)影响思科产品 URL: http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco - sa - 20150310 - ssl 确认:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679 确认:http://support.novell.com/security/cve/cve - 2015 - 0204. - html 确认:http://www ibm.com/support/docview.wss?uid=swg21883640——01. 确认:http://www ibm.com/support/docview.wss?uid=swg21960769——304. 确认:http://www.oracle.com/technetwork/security - advisory/cpujul2016 - 2881720. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpujul2018 - 4258247. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2017 - 3236626. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinapr2015 - 2511959. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinjan2015 - 2370101. - html 确认:http://www.oracle.com/technetwork/topics/security/cpuapr2015 - 2365600. - html 确认:http://www.oracle.com/technetwork/topics/security/cpujan2016 - 2367955. - html 确认:http://www.oracle.com/technetwork/topics/security/cpujul2015 - 2367936. - html 确认:http://www.oracle.com/technetwork/topics/security/cpuoct2015 - 2367953. - html 确认:https://bto.bluecoat.com/security-advisory/sa88 确认:https://bto.bluecoat.com/security-advisory/sa91 确认:https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0 确认:https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241 确认:https://kc.mcafee.com/corporate/index?page=content&id=SB10102 确认:https://kc.mcafee.com/corporate/index?page=content&id=SB10108 确认:https://kc.mcafee.com/corporate/index?page=content&id=SB10110 确认:https://support.apple.com/HT204659 确认:https://support.citrix.com/article/CTX216642 确认:https://www.openssl.org/news/万博下载包secadv_20150108.txt 确认:https://www.openssl.org/news/万博下载包secadv_20150319.txt DEBIAN: dsa - 3125 URL: http://www.debian.org/security/2015/dsa - 3125 GENTOO: glsa - 201503 - 11所示 URL: https://security.gentoo.org/glsa/201503-11 惠普:HPSBGN03299 URL: http://marc.info/?l=bugtraq&m=142720981827617&w=2 惠普:HPSBHF03289 URL: http://marc.info/?l=bugtraq&m=142721102728110&w=2 惠普:HPSBMU03345 URL: http://marc.info/?l=bugtraq&m=144043644216842&w=2 惠普:HPSBMU03380 URL: http://marc.info/?l=bugtraq&m=143748090628601&w=2 惠普:HPSBMU03396 URL: http://marc.info/?l=bugtraq&m=144050205101530&w=2 惠普:HPSBMU03397 URL: http://marc.info/?l=bugtraq&m=144050297101809&w=2 惠普:HPSBMU03409 URL: http://marc.info/?l=bugtraq&m=144050155601375&w=2 惠普:HPSBMU03413 URL: http://marc.info/?l=bugtraq&m=144050254401665&w=2 惠普:HPSBOV03318 URL: http://marc.info/?l=bugtraq&m=142895206924048&w=2 惠普:HPSBUX03162 URL: http://marc.info/?l=bugtraq&m=142496179803395&w=2 惠普:HPSBUX03244 URL: http://marc.info/?l=bugtraq&m=142496289803847&w=2 惠普:HPSBUX03334 URL: http://marc.info/?l=bugtraq&m=143213830203296&w=2 惠普:SSRT101885 URL: http://marc.info/?l=bugtraq&m=142496289803847&w=2 惠普:SSRT101987 URL: http://marc.info/?l=bugtraq&m=142720981827617&w=2 惠普:SSRT102000 URL: http://marc.info/?l=bugtraq&m=143213830203296&w=2 MANDRIVA: MDVSA-2015:019 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:019~~(过时的来源) MANDRIVA: MDVSA-2015:062 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:062~~(过时的来源) MANDRIVA: MDVSA-2015:063 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2015:063~~(过时的来源) MISC: https://freakattack.com/ 红帽:RHSA-2015:0066 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0066. - html 红帽:RHSA-2015:0800 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0800. - html 红帽:RHSA-2015:0849 URL: http://rhn.redhat.com/errata/rhsa - 2015 - 0849. - html 红帽:RHSA-2016:1650 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 1650. - html SECTRACK: 1033378 URL: http://www.securitytracker.com/id/1033378 SUSE: SUSE-SU-2015:0578 URL: http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html SUSE: SUSE-SU-2015:0946 URL: http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html SUSE: SUSE-SU-2015:1085 URL: http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html SUSE: SUSE-SU-2015:1086 URL: http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html SUSE: SUSE-SU-2015:1138 URL: http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html SUSE: SUSE-SU-2015:1161 URL: http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html SUSE: SUSE-SU-2015:2166 URL: http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html SUSE: SUSE-SU-2015:2168 URL: http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html SUSE: SUSE-SU-2015:2182 URL: http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html SUSE: SUSE-SU-2015:2192 URL: http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html SUSE: SUSE-SU-2015:2216 URL: http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html SUSE: SUSE-SU-2016:0113 URL: http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html SUSE: openSUSE-SU-2015:0130 URL: http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html SUSE: openSUSE-SU-2016:0640 URL: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html XF: openssl-cve20150204-weak-security (99707) URL: https://exchange.xforce.ibmcloud.com/vulnerabilities/99707
分配中央社
红帽公司。
创建日期记录
20141118	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20141118)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2015 - 0204