CVE-2015-3195 · threatengine.sh

Home/CVE/The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 bef

CVE

CVE-2015-3195

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 bef

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.

MEDIUM · CVSS 5.3 EPSS 0.03481

Monitor

No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence

Sigma rules8 YARA rules0

⬡

Weakness Classification

CWE-200Exposure of Sensitive Information to an Unauthorized Actor

▤

Affected Products & Versions

29

apple mac os x< 10.11.4
oracle api gatewayall versions
oracle communications webrtc session controllerall versions
oracle exalogic infrastructureall versions
oracle http serverall versions
oracle life sciences data huball versions
oracle sun ray softwareall versions
oracle transportation managementall versions
Show all 29 affected productsoracle vm serverall versions
oracle vm virtualbox< 4.3.36
oracle vm virtualbox>= 5.0.0 and < 5.0.14
oracle integrated lights out manager firmware>= 3.0 and <= 4.0.4
oracle linuxall versions
oracle solarisall versions
openssl< 0.9.8zh
openssl>= 1.0.0 and < 1.0.0t
openssl>= 1.0.1 and < 1.0.1q
openssl>= 1.0.2 and < 1.0.2e
redhat enterprise linux desktopall versions
redhat enterprise linux serverall versions
redhat enterprise linux server ausall versions
redhat enterprise linux server tusall versions
redhat enterprise linux workstationall versions
canonical ubuntu linuxall versions
debian linuxall versions
opensuse leapall versions
opensuseall versions
suse linux enterprise serverall versions
fedoraproject fedoraall versions

◈

Sigma Hunt Rules

8

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

productcriticalLinux Reverse Shell Indicator

producthighCommunication To LocaltoNet Tunneling Service Initiated - Linux

producthighPotentially Suspicious Malware Callback Communication - Linux

producthighLinux Crypto Mining Pool Connections

producthighCommunication To Ngrok Tunneling Service - Linux

producthighLinux Crypto Mining Indicators

Show all 8 top matches

producthighShell Execution GCC - Linux

producthighShell Execution via Rsync - Linux

See all related Sigma rules for this CVE

▣

Scoring & Timeline

5.3

MEDIUM · CVSS v3.1 · secalert@redhat.com

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD06 Dec 2015 · 08:59 PM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

⚑

Vendor Advisories

18

suse-csafopenSUSE-SU-2024:10271-1
suse-csafopenSUSE-SU-2024:10309-1
suse-csafopenSUSE-SU-2024:10529-1
suse-csafopenSUSE-SU-2024:11127-1
siemens-csafSSA-412672
Show all 18 vendor advisoriesrhsaRHSA-2016:2957Low
rhsaRHSA-2016:2056Low
suse-csafSUSE-SU-2016:0786-1
rhsaRHSA-2015:2617Low
suse-csafSUSE-SU-2015:2342-1
suse-csafSUSE-SU-2015:2275-1
suse-csafSUSE-SU-2015:2253-1
suse-csafSUSE-SU-2015:2251-1
suse-csafSUSE-SU-2015:2237-1
suse-csafSUSE-SU-2015:2230-1
usnUSN-2830-1
rhsaRHSA-2015:2616Moderate
cisa-csafcisa-csaf-csaf_files-OT-white-2022-icsa-22-349-21

🔗

References & Sources

47

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://fortiguard.com/advisory/openssl-advisory-december-2015Broken Link

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761Third Party Advisory

http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.htmlThird Party Advisory

Show all 47 references

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.htmlMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-12/msg00103.htmlMailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=145382583417444&w=2Mailing ListThird Party Advisory

http://openssl.org/news/secadv/20151203.txtVendor Advisory

http://rhn.redhat.com/errata/RHSA-2015-2616.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2617.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2056.htmlBroken Link

http://rhn.redhat.com/errata/RHSA-2016-2957.htmlThird Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-opensslThird Party Advisory

http://www.debian.org/security/2015/dsa-3413Third Party Advisory

http://www.fortiguard.com/advisory/openssl-advisory-december-2015Broken Link

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlThird Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.htmlThird Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlThird Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlThird Party Advisory

http://www.securityfocus.com/bid/78626Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/91787Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1034294Third Party AdvisoryVDB Entry

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583Third Party Advisory

http://www.ubuntu.com/usn/USN-2830-1Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

https://git.openssl.org/?p=openssl.git

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322Third Party Advisory

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100Third Party Advisory

https://support.apple.com/HT206167Third Party Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin