CVE-2015-0291

Description

The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 15.62% Top 10%

Vendor Advisory marc.info Vendor Advisory marc.info Vendor Advisory marc.info Vendor Advisory gentoo.org Vendor Advisory openssl.org

Affected: n/a n/a

References

Link	Tags
https://kc.mcafee.com/corporate/index?page=content&id=SB10110	third party advisory
http://www.securityfocus.com/bid/73235	third party advisory vdb entry
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	third party advisory
http://marc.info/?l=bugtraq&m=144050155601375&w=2	vendor advisory mailing list third party advisory
https://bto.bluecoat.com/security-advisory/sa92	third party advisory
https://www.openssl.org/news/secadv_20150319.txt	vendor advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	third party advisory
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=76343947ada960b6269090638f5391068daee88d
http://marc.info/?l=bugtraq&m=143748090628601&w=2	vendor advisory mailing list third party advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	third party advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	third party advisory patch
http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015	third party advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html	third party advisory
http://marc.info/?l=bugtraq&m=144050297101809&w=2	vendor advisory mailing list third party advisory
http://www.securitytracker.com/id/1031929	third party advisory vdb entry
https://security.gentoo.org/glsa/201503-11	third party advisory vendor advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1202338	issue tracking
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Frequently Asked Questions

What is the severity of CVE-2015-0291?: CVE-2015-0291 has been scored as a medium severity vulnerability.
How to fix CVE-2015-0291?: To fix CVE-2015-0291, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2015-0291 being actively exploited in the wild?: It is possible that CVE-2015-0291 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~16% probability that this vulnerability will be exploited by malicious actors in the next 30 days.