CVE-2015-3194 : crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e al

crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.

Published 2015-12-06 20:59:05

Updated 2025-04-12 10:46:41

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2015-3194

Debian » Debian Linux » Version: 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1f
cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1c
cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1b
cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1e
cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1d
cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1
cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1a
cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1g
cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1h
cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1i
cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1j
cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2
cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1l
cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1k
cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1m
cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2a
cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2b
cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2c
cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1n
cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1o
cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.2d
cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*
Matching versions
Openssl » Openssl » Version: 1.0.1p
cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 15.04
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 15.10
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 12.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Matching versions
Nodejs » Node.js
Versions from including (>=) 0.12.0 and before (<) 0.12.9
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Matching versions
Nodejs » Node.js » LTS Edition
Versions from including (>=) 4.0.0 and before (<) 4.2.3
cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*
Matching versions
Nodejs » Node.js
Versions from including (>=) 0.10.0 and before (<) 0.10.41
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Matching versions
Nodejs » Node.js
Versions from including (>=) 5.0.0 and before (<) 5.1.1
cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-3194

EPSS FAQ

57.95%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-3194

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2015-3194

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-3194

http://www.fortiguard.com/advisory/openssl-advisory-december-2015

FortiGuard
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/78623

OpenSSL CVE-2015-3194 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://git.openssl.org/?p=openssl.git;a=commit;h=c394a488942387246653833359a5c94b5832674e

git.openssl.org Git - openssl.git/commit
Vendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761

Juniper Networks - 2016-10 Security Bulletin: CTPView: Multiple vulnerabilities in CTPView
Third Party Advisory

CVEs referencing this url
http://marc.info/?l=bugtraq&m=145382583417444&w=2

'[security bulletin] HPSBGN03536 rev.1 - HP IceWall Products running OpenSSL, Remote and Local Denial' - MARC
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

cpuapr2016v3
Patch;Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/91787

Oracle July 2016 Critical Patch Update Multiple Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url
https://git.openssl.org/?p=openssl.git;a=commit;h=d8541d7e9e63bf5f343af24644046c8d96498c17

git.openssl.org Git - openssl.git/commit
Vendor Advisory
http://www.securitytracker.com/id/1034294

OpenSSL Multiple Bugs Let Remote Users Deny Service and Obtain Potentially Sensitive Information - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2016-2957.html

RHSA-2016:2957 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888

HPSBMU03611 rev.2 - HPE Matrix Operating Environment on Windows and Linux, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173

HPSBGN03536 rev.1 - HP IceWall Products running OpenSSL, Remote and Local Denial of Service (DoS)
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017

HPSBMU03593 rev.2 - HPE System Management Homepage (SMH), Remote Code Execution, Denial of Service (DoS), Disclosure of Sensitive Information
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html

openSUSE-SU-2015:2289-1: moderate: Security update for openssl
Mailing List;Third Party Advisory

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2015-2617.html

RHSA-2015:2617 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667

HPSBMU03607 rev.1 - HPE BladeSystem c-Class Virtual Connect (VC) Firmware, Remote Denial of Service (DoS), Disclosure of Information, Cross-Site Request Forgery (CSRF)
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html

[security-announce] openSUSE-SU-2016:1332-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Oracle Critical Patch Update - October 2017
Patch;Vendor Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Oracle Critical Patch Update - July 2016
Patch;Vendor Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Oracle Linux Bulletin - October 2015
Vendor Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085

HPSBMU03590 rev.3 - HPE Systems Insight Manager (SIM), Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
http://openssl.org/news/secadv/20151203.txt

Vendor Advisory

CVEs referencing this url
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100

Pulse Security Advisory: SA40100 - [Pulse Secure] December 3rd 2015 OpenSSL Security Advisory
Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Oracle Solaris Bulletin - January 2016
Vendor Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html

openSUSE-SU-2015:2288-1: moderate: Security update for OpenSSL
Mailing List;Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322

Sorry
Third Party Advisory

CVEs referencing this url
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c394a488942387246653833359a5c94b5832674e

GitHub - openssl/openssl: TLS/SSL and crypto library
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html

[security-announce] openSUSE-SU-2016:0637-1: important: Security update
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.debian.org/security/2015/dsa-3413

Debian -- Security Information -- DSA-3413-1 openssl
Third Party Advisory

CVEs referencing this url
http://fortiguard.com/advisory/openssl-advisory-december-2015

FortiGuard
Third Party Advisory

CVEs referencing this url
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380

HPSBMU03612 rev.2 - HPE Insight Control on Windows and Linux, Multiple Remote Vulnerabilities
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=1288320

1288320 – (CVE-2015-3194) CVE-2015-3194 OpenSSL: Certificate verify crash with missing PSS parameter
Issue Tracking;Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

CVEs referencing this url
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583

The Slackware Linux Project: Slackware Security Advisories
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html

openSUSE-SU-2015:2318-1: moderate: Security update for libressl
Mailing List;Third Party Advisory

CVEs referencing this url
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=d8541d7e9e63bf5f343af24644046c8d96498c17

GitHub - openssl/openssl: TLS/SSL and crypto library
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Juniper Networks - 2016-10 Security Bulletin: OpenSSL security updates
Third Party Advisory

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2830-1

USN-2830-1: OpenSSL vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl

Multiple Vulnerabilities in OpenSSL (December 2015) Affecting Cisco Products
Third Party Advisory

CVEs referencing this url
http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html

[SECURITY] Fedora 22 Update: openssl-1.0.1k-13.fc22
Mailing List;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2015-3194

Products affected by CVE-2015-3194

Exploit prediction scoring system (EPSS) score for CVE-2015-3194

CVSS scores for CVE-2015-3194

CWE ids for CVE-2015-3194

References for CVE-2015-3194