CVE-2015-3216
Race condition in a certain Red Hat patch to the PRNG lock implementation in the...
4.3 Medium
Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.
Exploit likelihood
4.27%Up 2.1 points since Feb 4, 2022
What each source reports
NVD Score used
Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.
- Record
CVE-2015-3216- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-189, CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.
- Record
CVE-2015-3216- Updated
- 2026-11-02
EUVDEUVD-2015-3279 No score
Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.
- Record
EUVD-2015-3279- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3522-gq68-vxp6 No score
Race condition in a certain Red Hat patch to the PRNG lock implementation in the...
Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.
- Record
GHSA-3522-gq68-vxp6- Updated
- 2026-11-02
OSVRHSA-2015:1115
Red Hat Security Advisory: openssl security update
- Record
RHSA-2015:1115- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-FU-2022:0445-1 No score
Feature update for venv-salt-minion
This feature update for venv-salt-minion provides the following changes:
- Introduce
venv-salt-minion. - Mention fixed issues provided with the bundle.
- Record
SUSE-FU-2022:0445-1- Updated
- 2026-11-02
Show 10 moreShow less
OSVSUSE-SU-2015:0545-1 No score
Security update for OpenSSL
OpenSSL has been updated to fix several security issues:
* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
compression by default. Setting the environment variable
'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
local attackers to gain access to transmitted plain text or private
keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.
Security Issue references:
* CVE-2013-0169
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>
- Record
SUSE-SU-2015:0545-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0545-2 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:0545-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1143-1 No score
Security update for openssl
This update of openssl fixes the following security issues:
- CVE-2015-4000 (bsc#931698)
- The Logjam Attack / weakdh.org
- reject connections with DH parameters shorter than 1024 bits
- generates 2048-bit DH parameters by default
- CVE-2015-1788 (bsc#934487)
- Malformed ECParameters causes infinite loop
- CVE-2015-1789 (bsc#934489)
- Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (bsc#934491)
- PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (bsc#934493)
- CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (bsc#933911)
- race condition in NewSessionTicket
- CVE-2015-3216 (bsc#933898)
- Crash in ssleay_rand_bytes due to locking regression
- fix a timing side channel in RSA decryption (bnc#929678)
- Record
SUSE-SU-2015:1143-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1150-1 No score
Security update for compat-openssl098
This update fixes the following security issues:
- CVE-2015-4000 (boo#931698)
- The Logjam Attack / weakdh.org
- reject connections with DH parameters shorter than 1024 bits
- generates 2048-bit DH parameters by default
- CVE-2015-1788 (boo#934487)
- Malformed ECParameters causes infinite loop
- CVE-2015-1789 (boo#934489)
- Exploitable out-of-bounds read in X509_cmp_time
- CVE-2015-1790 (boo#934491)
- PKCS7 crash with missing EnvelopedContent
- CVE-2015-1792 (boo#934493)
- CMS verify infinite loop with unknown hash function
- CVE-2015-1791 (boo#933911)
- race condition in NewSessionTicket
- CVE-2015-3216 (boo#933898)
- Crash in ssleay_rand_bytes due to locking regression
- modified openssl-1.0.1i-fipslocking.patch
- fix timing side channel in RSA decryption (bnc#929678)
- add ECC ciphersuites to DEFAULT (bnc#879179)
- Disable EXPORT ciphers by default (bnc#931698, comment #3)
- Record
SUSE-SU-2015:1150-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1182-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:1182-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1182-2 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:1182-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1184-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:1184-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1184-2 No score
Security update for OpenSSL
OpenSSL has been updated to fix several security issues:
* CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL
compression by default. Setting the environment variable
'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.
* CVE-2013-0169: Timing attacks against TLS could be used by physically
local attackers to gain access to transmitted plain text or private
keymaterial. This issue is also known as the 'Lucky-13' issue.
* CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.
Security Issue references:
* CVE-2013-0169
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169>
* CVE-2013-0166
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166>
- Record
SUSE-SU-2015:1184-2- Updated
- 2026-11-02
OSVSUSE-SU-403 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403- Updated
- 2026-11-02
OSVSUSE-SU-403 Forbidden-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403 Forbidden-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-perlRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-staticRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
opensslRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-perlRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-staticRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
Show 66 moreShow less
| Package | Affected | Fixed |
|---|---|---|
opensslRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-perlRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-staticRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
opensslRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-perlRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
openssl-staticRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:1.0.1e-30.el6_6.11 | 0:1.0.1e-30.el6_6.11 |
opensslRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-libsRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-develRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-perlRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-staticRed Hat:enterprise_linux:7::client From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
opensslRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-libsRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-develRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-perlRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-staticRed Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
opensslRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 1:1.0.1e-42.ael7b_1.8 | 1:1.0.1e-42.ael7b_1.8 |
openssl-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 1:1.0.1e-42.ael7b_1.8 | 1:1.0.1e-42.ael7b_1.8 |
openssl-develRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 1:1.0.1e-42.ael7b_1.8 | 1:1.0.1e-42.ael7b_1.8 |
openssl-libsRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 1:1.0.1e-42.ael7b_1.8 | 1:1.0.1e-42.ael7b_1.8 |
openssl-perlRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 1:1.0.1e-42.ael7b_1.8 | 1:1.0.1e-42.ael7b_1.8 |
openssl-staticRed Hat:enterprise_linux:7::server From an advisory covering 6 CVEs |
before 1:1.0.1e-42.ael7b_1.8 | 1:1.0.1e-42.ael7b_1.8 |
opensslRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-develRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-libsRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-perlRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
openssl-staticRed Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs |
before 1:1.0.1e-42.el7_1.8 | 1:1.0.1e-42.el7_1.8 |
opensslSUSE:Linux Enterprise Desktop 12 From an advisory covering 7 CVEs |
before 1.0.1i-25.1 | 1.0.1i-25.1 |
opensslSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 7 CVEs |
before 1.0.1i-25.1 | 1.0.1i-25.1 |
opensslSUSE:Linux Enterprise Server 12 From an advisory covering 7 CVEs |
before 1.0.1i-25.1 | 1.0.1i-25.1 |
opensslSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 7 CVEs |
before 1.0.1i-25.1 | 1.0.1i-25.1 |
compat-openssl098SUSE:Linux Enterprise Desktop 12 From an advisory covering 7 CVEs |
before 0.9.8j-78.1 | 0.9.8j-78.1 |
compat-openssl098SUSE:Linux Enterprise Module for Legacy 12 From an advisory covering 7 CVEs |
before 0.9.8j-78.1 | 0.9.8j-78.1 |
libqt4SUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3216 is a medium vulnerability (CVSS 4.3) in Openssl, published March 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.27%, the 91st percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html
securitytracker.com/id/1032587
rhn.redhat.com/errata/RHSA-2015-1115.html
Show 194 moreShow less
securityfocus.com/bid/75219
bugzilla.redhat.com/show_bug.cgi?id=1225994
nvd.nist.gov/vuln/detail/CVE-2015-3216
github.com/advisories/GHSA-3522-gq68-vxp6
access.redhat.com/errata/RHSA-2015:1115
openssl.org/news/secadv_20150611.txt
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1115.json
cve.org/CVERecord?id=CVE-2014-8176
suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1
bugzilla.suse.com/1000080
This page doesn't list everything
Left out here: 551 references. The JSON record has them.