{"id":"CVE-2015-0292","aliases":["BELL-CVE-2015-0292","DEBIAN-CVE-2015-0292","DLA-177-1","DSA-3197-1","EUVD-2015-0305","GHSA-3467-h7vq-fjwx","RHSA-2015:0715","RHSA-2015:0716","RHSA-2015:0752","RHSA-2015:0800","SUSE-RU-2015:0769-1","SUSE-SU-2015:0182-2","SUSE-SU-2015:0543-1","SUSE-SU-2015:0545-1","SUSE-SU-2015:0545-2","SUSE-SU-2015:0546-1","SUSE-SU-2015:0547-1","SUSE-SU-2015:0553-1","SUSE-SU-2015:0553-2","SUSE-SU-2015:0578-1","SUSE-SU-2015:1182-1","SUSE-SU-2015:1182-2","SUSE-SU-2015:1183-1","SUSE-SU-2015:1183-2","SUSE-SU-2015:1184-1","SUSE-SU-2015:1184-2","SUSE-SU-2015:1185-1","SUSE-SU-403","UBUNTU-CVE-2015-0292","USN-2537-1"],"status":"published","title":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding...","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.4253,"percentile":0.98715,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2012-08-30T22:56:05Z","modified":"2026-09-21T10:01:15Z","fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.0.1h-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.0.1h-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.0.1h-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.11"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1h-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1h-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1h-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8o-4squeeze20"}]}],"versions":["0.9.8o-4","0.9.8o-4squeeze1","0.9.8o-4squeeze11","0.9.8o-4squeeze12","0.9.8o-4squeeze13","0.9.8o-4squeeze14","0.9.8o-4squeeze15","0.9.8o-4squeeze16","0.9.8o-4squeeze17","0.9.8o-4squeeze18","0.9.8o-4squeeze19","0.9.8o-4squeeze2","0.9.8o-4squeeze3","0.9.8o-4squeeze4","0.9.8o-4squeeze4~bpo50+1","0.9.8o-4squeeze5","0.9.8o-4squeeze7","0.9.8o-4squeeze8","0.9.8o-4squeeze9"],"bundled":7},{"source":"osv","ecosystem":"Debian:7","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1e-2+deb7u15"}]}],"versions":["1.0.1e-2","1.0.1e-2+deb7u1","1.0.1e-2+deb7u10","1.0.1e-2+deb7u11","1.0.1e-2+deb7u12","1.0.1e-2+deb7u13","1.0.1e-2+deb7u14","1.0.1e-2+deb7u2","1.0.1e-2+deb7u3","1.0.1e-2+deb7u4","1.0.1e-2+deb7u5","1.0.1e-2+deb7u6","1.0.1e-2+deb7u7","1.0.1e-2+deb7u8","1.0.1e-2+deb7u9"],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.ael7b_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.1e-42.el7_1.4"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:storage:2.1:server:el6","package":"openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1e-30.el6_6.7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8e-33.el5_11"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-73.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"compat-openssl098","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8j-73.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.3"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"libqt4-sql-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.6-7.1"}]}],"bundled":54},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.11"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.11"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8"],"bundled":7}],"products":[{"vendor":"openssl","product":"openssl"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10110","tags":["x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0715.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10680","tags":["x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3197","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2537-1","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050155601375\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://bto.bluecoat.com/security-advisory/sa92","tags":["x_transferred","advisory"]},{"url":"https://www.openssl.org/news/secadv_20150319.txt","tags":["x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://rt.openssl.org/Ticket/Display.html?id=2608\u0026user=guest\u0026pass=guest","tags":["x_transferred","Exploit","evidence"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","tags":["x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143748090628601\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202395","tags":["x_transferred","report"]},{"url":"https://access.redhat.com/articles/1384453","tags":["x_transferred","web","article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/73228","tags":["vdb-entry","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=143213830203296\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015","tags":["x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","tags":["x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0716.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144050297101809\u0026w=2","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0666f289ac013094bbbf547bfbcd616199b7d2d","tags":["x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","tags":["x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0752.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1031929","tags":["vdb-entry","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://support.citrix.com/article/CTX216642","tags":["x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201503-11","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0292","tags":["advisory"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=d0666f289ac013094bbbf547bfbcd616199b7d2d"},{"url":"https://github.com/advisories/GHSA-3467-h7vq-fjwx"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-0292","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-0292","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0715","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202366","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1202418","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0715.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0209","tags":["advisory"]},{"url":"https://openssl.org/news/secadv_20150319.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0286","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0286","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0286","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0287","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0287","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0287","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0288","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0288","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0288","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0289","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0292","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0292","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0293","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310811","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0703","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0703","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20160301.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1310814","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0704","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0716","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0716.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0752","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0752.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0800","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv_20150108.txt","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180187","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0800.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8275","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8275","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0204","tags":["advisory"]},{"url":"https://securityblog.redhat.com/2015/03/04/factoring-rsa-export-keys-freak-cve-2015-0204/","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150769-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/860332","tags":["report"]},{"url":"https://bugzilla.suse.com/861014","tags":["report"]},{"url":"https://bugzilla.suse.com/864912","tags":["report"]},{"url":"https://bugzilla.suse.com/869945","tags":["report"]},{"url":"https://bugzilla.suse.com/872299","tags":["report"]},{"url":"https://bugzilla.suse.com/873351","tags":["report"]},{"url":"https://bugzilla.suse.com/876282","tags":["report"]},{"url":"https://bugzilla.suse.com/880891","tags":["report"]},{"url":"https://bugzilla.suse.com/889812","tags":["report"]},{"url":"https://bugzilla.suse.com/890764","tags":["report"]},{"url":"https://bugzilla.suse.com/890767","tags":["report"]},{"url":"https://bugzilla.suse.com/890768","tags":["report"]},{"url":"https://bugzilla.suse.com/890769","tags":["report"]},{"url":"https://bugzilla.suse.com/890770","tags":["report"]},{"url":"https://bugzilla.suse.com/901223","tags":["report"]},{"url":"https://bugzilla.suse.com/901277","tags":["report"]},{"url":"https://bugzilla.suse.com/906878","tags":["report"]},{"url":"https://bugzilla.suse.com/912014","tags":["report"]},{"url":"https://bugzilla.suse.com/912015","tags":["report"]},{"url":"https://bugzilla.suse.com/912018","tags":["report"]},{"url":"https://bugzilla.suse.com/912292","tags":["report"]},{"url":"https://bugzilla.suse.com/912293","tags":["report"]},{"url":"https://bugzilla.suse.com/912294","tags":["report"]},{"url":"https://bugzilla.suse.com/912296","tags":["report"]},{"url":"https://bugzilla.suse.com/919648","tags":["report"]},{"url":"https://bugzilla.suse.com/920236","tags":["report"]},{"url":"https://bugzilla.suse.com/922488","tags":["report"]},{"url":"https://bugzilla.suse.com/922496","tags":["report"]},{"url":"https://bugzilla.suse.com/922499","tags":["report"]},{"url":"https://bugzilla.suse.com/922500","tags":["report"]},{"url":"https://bugzilla.suse.com/922501","tags":["report"]},{"url":"https://bugzilla.suse.com/923384","tags":["report"]},{"url":"https://bugzilla.suse.com/929678","tags":["report"]},{"url":"https://bugzilla.suse.com/931698","tags":["report"]},{"url":"https://bugzilla.suse.com/933911","tags":["report"]},{"url":"https://bugzilla.suse.com/934487","tags":["report"]},{"url":"https://bugzilla.suse.com/934489","tags":["report"]},{"url":"https://bugzilla.suse.com/934491","tags":["report"]},{"url":"https://bugzilla.suse.com/934493","tags":["report"]},{"url":"https://bugzilla.suse.com/934494","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150182-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/758060","tags":["report"]},{"url":"https://bugzilla.suse.com/802184","tags":["report"]},{"url":"https://bugzilla.suse.com/905106","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150543-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150545-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/779952","tags":["report"]},{"url":"https://bugzilla.suse.com/802648","tags":["report"]},{"url":"https://bugzilla.suse.com/802746","tags":["report"]},{"url":"https://bugzilla.suse.com/859228","tags":["report"]},{"url":"https://bugzilla.suse.com/859924","tags":["report"]},{"url":"https://bugzilla.suse.com/862181","tags":["report"]},{"url":"https://bugzilla.suse.com/870192","tags":["report"]},{"url":"https://bugzilla.suse.com/892403","tags":["report"]},{"url":"https://bugzilla.suse.com/915976","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2009-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3216","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150545-2/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/879179","tags":["report"]},{"url":"https://bugzilla.suse.com/933898","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150546-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150547-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150553-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150553-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150578-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151182-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151182-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151183-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151183-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151184-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/608666","tags":["report"]},{"url":"https://bugzilla.suse.com/629905","tags":["report"]},{"url":"https://bugzilla.suse.com/651003","tags":["report"]},{"url":"https://bugzilla.suse.com/657663","tags":["report"]},{"url":"https://bugzilla.suse.com/670526","tags":["report"]},{"url":"https://bugzilla.suse.com/693027","tags":["report"]},{"url":"https://bugzilla.suse.com/716144","tags":["report"]},{"url":"https://bugzilla.suse.com/739719","tags":["report"]},{"url":"https://bugzilla.suse.com/742821","tags":["report"]},{"url":"https://bugzilla.suse.com/743344","tags":["report"]},{"url":"https://bugzilla.suse.com/748738","tags":["report"]},{"url":"https://bugzilla.suse.com/749210","tags":["report"]},{"url":"https://bugzilla.suse.com/749213","tags":["report"]},{"url":"https://bugzilla.suse.com/749735","tags":["report"]},{"url":"https://bugzilla.suse.com/751946","tags":["report"]},{"url":"https://bugzilla.suse.com/751977","tags":["report"]},{"url":"https://bugzilla.suse.com/755395","tags":["report"]},{"url":"https://bugzilla.suse.com/761324","tags":["report"]},{"url":"https://bugzilla.suse.com/761838","tags":["report"]},{"url":"https://bugzilla.suse.com/767256","tags":["report"]},{"url":"https://bugzilla.suse.com/768097","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-4180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2333","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151184-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151185-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-su-403/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-su-403 forbidden-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0292","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2537-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-0209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0293","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-0292","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","status":"published","published":"2015-03-19T00:00:00Z","modified":"2024-08-06T04:03:10.891Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0305","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","status":"published","published":"2015-03-19T00:00:00Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-3467-h7vq-fjwx","title":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding...","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","status":"published","published":"2022-05-17T00:24:11Z","modified":"2025-04-12T12:47:23Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:21.34906Z"}],"nvd":[{"id":"CVE-2015-0292","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","status":"published","published":"2015-03-19T22:59:10.69Z","modified":"2026-06-17T00:19:55.637Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:03.313464Z"}],"osv":[{"id":"BELL-CVE-2015-0292","title":"CVE-2015-0292 does not affect BellSoft software","status":"withdrawn","published":"2015-03-19T22:59:00Z","modified":"2026-01-28T07:21:37.52046Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"RHSA-2015:0800","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T22:24:46Z","modified":"2026-08-05T10:03:12Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"CVE-2015-0292","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","status":"published","published":"2015-03-19T22:59:10Z","modified":"2026-04-10T03:45:01.602493Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-0292","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","status":"published","published":"2015-03-19T22:59:10.69Z","modified":"2026-09-09T06:47:24.451653691Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-177-1","title":"openssl - security update","status":"published","published":"2015-03-20T00:00:00Z","modified":"2026-03-09T01:20:53.80736Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3197-1","title":"openssl - security update","status":"published","published":"2015-03-19T00:00:00Z","modified":"2026-03-09T01:18:12.939703Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"RHSA-2015:0715","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T22:24:35Z","modified":"2026-09-21T10:01:14Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0716","title":"Red Hat Security Advisory: openssl security and bug fix update","status":"published","published":"2024-09-15T22:24:29Z","modified":"2026-09-21T10:01:14Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:0752","title":"Red Hat Security Advisory: openssl security update","status":"published","published":"2024-09-15T22:24:40Z","modified":"2026-09-21T10:01:15Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-RU-2015:0769-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T02:44:28.505462Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0182-2","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      can result in memory corruption during buffer management operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T02:20:49.976804Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0543-1","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      can result in memory corruption during buffer management operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T03:48:17.665325Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0545-1","title":"Security update for OpenSSL","description":"\nOpenSSL has been updated to fix several security issues:\n\n    * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL\n      compression by default. Setting the environment variable\n      'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.\n    * CVE-2013-0169: Timing attacks against TLS could be used by physically\n      local attackers to gain access to transmitted plain text or private\n      keymaterial. This issue is also known as the 'Lucky-13' issue.\n    * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.\n\nSecurity Issue references:\n\n    * CVE-2013-0169\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169\u003e\n    * CVE-2013-0166\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166\u003e\n\n","status":"published","published":"2013-03-25T15:10:09Z","modified":"2026-02-04T03:54:49.726473Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0545-2","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:31:48.188461Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0546-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T03:02:18.565758Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0547-1","title":"Security update for compat-openssl097g","description":"\nOpenSSL was updated to fix several security issues:\n\n    * CVE-2015-4000: The Logjam Attack ( weakdh.org ) has been addressed by\n      rejecting connections with DH parameters shorter than 1024 bits.\n      2048-bit DH parameters are now generated by default.\n    * CVE-2015-1789: An out-of-bounds read in X509_cmp_time was fixed.\n    * CVE-2015-1790: A PKCS7 decoder crash with missing EnvelopedContent\n      was fixed.\n    * Fixed a timing side channel in RSA decryption. (bsc#929678)\n\nAdditional changes:\n\n    * In the default SSL cipher string EXPORT ciphers are now disabled.\n      This will only get active if applications get rebuilt and actually\n      use this string. (bsc#931698)\n\nSecurity Issues:\n\n    * CVE-2015-1789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789\u003e\n    * CVE-2015-1790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790\u003e\n    * CVE-2015-4000\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000\u003e\n\n","status":"published","published":"2015-06-19T09:33:13Z","modified":"2026-02-04T03:59:22.720712Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0553-1","title":"Security update for compat-openssl098","description":"OpenSSL was updated to fix various security issues.\n\nFollowing security issues were fixed:\n- CVE-2015-0209: A Use After Free following d2i_ECPrivatekey error\n  was fixed which could lead to crashes for attacker supplied Elliptic\n  Curve keys. This could be exploited over SSL connections with client\n  supplied keys.\n\n- CVE-2015-0286: A segmentation fault in ASN1_TYPE_cmp was fixed that\n  could be exploited by attackers when e.g. client authentication is\n  used. This could be exploited over SSL connections.\n\n- CVE-2015-0287: A ASN.1 structure reuse memory corruption was fixed. This\n  problem can not be exploited over regular SSL connections, only if\n  specific client programs use specific ASN.1 routines.\n\n- CVE-2015-0288: A X509_to_X509_REQ NULL pointer dereference was fixed,\n  which could lead to crashes. This function is not commonly used, and\n  not reachable over SSL methods.\n\n- CVE-2015-0289: Several PKCS7 NULL pointer dereferences were fixed,\n  which could lead to crashes of programs using the PKCS7 APIs. The SSL\n  apis do not use those by default.\n\n- CVE-2015-0292: Various issues in base64 decoding were fixed, which\n  could lead to crashes with memory corruption, for instance by using\n  attacker supplied PEM data.\n\n- CVE-2015-0293: Denial of service via reachable assert in SSLv2 servers,\n  could be used by remote attackers to terminate the server process. Note\n  that this requires SSLv2 being allowed, which is not the default.\n\n- CVE-2009-5146: A memory leak in the TLS hostname extension was fixed,\n  which could be used by remote attackers to run SSL services out of memory.\n","status":"published","published":"2015-03-18T18:42:02Z","modified":"2026-02-04T03:26:55.889326Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0553-2","title":"Security update for compat-openssl098","description":"OpenSSL was updated to fix various security issues.\n\nFollowing security issues were fixed:\n- CVE-2015-0209: A Use After Free following d2i_ECPrivatekey error\n  was fixed which could lead to crashes for attacker supplied Elliptic\n  Curve keys. This could be exploited over SSL connections with client\n  supplied keys.\n\n- CVE-2015-0286: A segmentation fault in ASN1_TYPE_cmp was fixed that\n  could be exploited by attackers when e.g. client authentication is\n  used. This could be exploited over SSL connections.\n\n- CVE-2015-0287: A ASN.1 structure reuse memory corruption was fixed. This\n  problem can not be exploited over regular SSL connections, only if\n  specific client programs use specific ASN.1 routines.\n\n- CVE-2015-0288: A X509_to_X509_REQ NULL pointer dereference was fixed,\n  which could lead to crashes. This function is not commonly used, and\n  not reachable over SSL methods.\n\n- CVE-2015-0289: Several PKCS7 NULL pointer dereferences were fixed,\n  which could lead to crashes of programs using the PKCS7 APIs. The SSL\n  apis do not use those by default.\n\n- CVE-2015-0292: Various issues in base64 decoding were fixed, which\n  could lead to crashes with memory corruption, for instance by using\n  attacker supplied PEM data.\n\n- CVE-2015-0293: Denial of service via reachable assert in SSLv2 servers,\n  could be used by remote attackers to terminate the server process. Note\n  that this requires SSLv2 being allowed, which is not the default.\n\n- CVE-2009-5146: A memory leak in the TLS hostname extension was fixed,\n  which could be used by remote attackers to run SSL services out of memory.\n","status":"published","published":"2015-03-18T18:42:03Z","modified":"2026-02-04T03:41:33.508159Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0578-1","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      could have resulted in memory corruption during buffer management\n      operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T02:13:21.203937Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1182-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T02:26:57.132285Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1182-2","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T04:33:49.202673Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1183-1","title":"Security update for compat-openssl097g","description":"\nThis compat-openssl097g rollup update contains various security fixes:\n\n    * CVE-2012-2131,CVE-2012-2110: incorrect integer conversions in OpenSSL\n      could have resulted in memory corruption during buffer management\n      operations.\n\nSecurity Issue reference:\n\n    * CVE-2012-2110\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110\u003e\n\n","status":"published","published":"2012-08-30T22:56:05Z","modified":"2026-02-04T02:22:12.859082Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1183-2","title":"Security update for compat-openssl097g","description":"\nOpenSSL was updated to fix several security issues:\n\n    * CVE-2015-4000: The Logjam Attack ( weakdh.org ) has been addressed by\n      rejecting connections with DH parameters shorter than 1024 bits.\n      2048-bit DH parameters are now generated by default.\n    * CVE-2015-1789: An out-of-bounds read in X509_cmp_time was fixed.\n    * CVE-2015-1790: A PKCS7 decoder crash with missing EnvelopedContent\n      was fixed.\n    * Fixed a timing side channel in RSA decryption. (bsc#929678)\n\nAdditional changes:\n\n    * In the default SSL cipher string EXPORT ciphers are now disabled.\n      This will only get active if applications get rebuilt and actually\n      use this string. (bsc#931698)\n\nSecurity Issues:\n\n    * CVE-2015-1789\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789\u003e\n    * CVE-2015-1790\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790\u003e\n    * CVE-2015-4000\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000\u003e\n\n","status":"published","published":"2015-06-19T09:33:13Z","modified":"2026-02-04T02:14:08.577666Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1184-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:17:21.888768Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1184-2","title":"Security update for OpenSSL","description":"\nOpenSSL has been updated to fix several security issues:\n\n    * CVE-2012-4929: Avoid the openssl CRIME attack by disabling SSL\n      compression by default. Setting the environment variable\n      'OPENSSL_NO_DEFAULT_ZLIB' to 'no' enables compression again.\n    * CVE-2013-0169: Timing attacks against TLS could be used by physically\n      local attackers to gain access to transmitted plain text or private\n      keymaterial. This issue is also known as the 'Lucky-13' issue.\n    * CVE-2013-0166: A OCSP invalid key denial of service issue was fixed.\n\nSecurity Issue references:\n\n    * CVE-2013-0169\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169\u003e\n    * CVE-2013-0166\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166\u003e\n\n","status":"published","published":"2013-03-25T15:10:09Z","modified":"2025-05-02T04:03:49.369385Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1185-1","title":"Security update for openssl1","description":"\nThis OpenSSL update fixes the following issues:\n\n    * SRTP Memory Leak (CVE-2014-3513)\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513\u003e\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-22T23:22:56Z","modified":"2026-02-04T04:18:15.95367Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-403","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T02:43:34.868415Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-403 Forbidden-1","title":"Security update for OpenSSL","description":"\nThis OpenSSL update fixes the following issues:\n\n    * Session Ticket Memory Leak (CVE-2014-3567)\n    * Build option no-ssl3 is incomplete (CVE-2014-3568)\n    * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)\n\nSecurity Issues:\n\n    * CVE-2014-3567\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567\u003e\n    * CVE-2014-3566\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566\u003e\n    * CVE-2014-3568\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568\u003e\n\n","status":"published","published":"2014-10-24T22:07:03Z","modified":"2026-02-04T03:35:11.255833Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"UBUNTU-CVE-2015-0292","description":"Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.","status":"published","published":"2015-03-17T00:00:00Z","modified":"2026-04-22T09:59:44.134262Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2537-1","title":"openssl vulnerabilities","description":"It was discovered that OpenSSL incorrectly handled malformed EC private key\nfiles. A remote attacker could possibly use this issue to cause OpenSSL to\ncrash, resulting in a denial of service, or execute arbitrary code.\n(CVE-2015-0209)\n\nStephen Henson discovered that OpenSSL incorrectly handled comparing ASN.1\nboolean types. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2015-0286)\n\nEmilia Käsper discovered that OpenSSL incorrectly handled ASN.1 structure\nreuse. A remote attacker could possibly use this issue to cause OpenSSL to\ncrash, resulting in a denial of service, or execute arbitrary code.\n(CVE-2015-0287)\n\nBrian Carpenter discovered that OpenSSL incorrectly handled invalid\ncertificate keys. A remote attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2015-0288)\n\nMichal Zalewski discovered that OpenSSL incorrectly handled missing outer\nContentInfo when parsing PKCS#7 structures. A remote attacker could\npossibly use this issue to cause OpenSSL to crash, resulting in a denial of\nservice, or execute arbitrary code. (CVE-2015-0289)\n\nRobert Dugal and David Ramos discovered that OpenSSL incorrectly handled\ndecoding Base64 encoded data. A remote attacker could possibly use this\nissue to cause OpenSSL to crash, resulting in a denial of service, or\nexecute arbitrary code. (CVE-2015-0292)\n\nSean Burford and Emilia Käsper discovered that OpenSSL incorrectly handled\nspecially crafted SSLv2 CLIENT-MASTER-KEY messages. A remote attacker could\npossibly use this issue to cause OpenSSL to crash, resulting in a denial of\nservice. (CVE-2015-0293)\n","status":"published","published":"2015-03-19T17:10:25Z","modified":"2026-04-22T09:09:31.197883Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}