Description

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

Remediation

References

CVE-2015-1794

Related Vulnerabilities

TYPO3 Improper Input Validation Vulnerability (CVE-2014-3941)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2741)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4524)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-1564)

Liferay Portal Other Vulnerability (CVE-2024-25150)

Severity

Medium

Classification

CVE-2015-1794

Tags

Missing Update Known Vulnerabilities