Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-3197
4.3
MEDIUMCVSS v2
Published
February 15, 2016
Affected
3 projects
Assigned by
Red Hat
Severity scale
010
Description
ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.
openssl/openssl
GitHubGeneral purpose TLS and crypto library
GitHubGeneral purpose TLS and crypto library= 1.0.1m, = 1.0.2a, = 1.0.1j, = 1.0.1, = 1.0.1h, = 1.0.2e, = 1.0.2b, = 1.0.1c, = 1.0.1g, = 1.0.2, = 1.0.1n, = 1.0.1f, = 1.0.1e, = 1.0.1q, = 1.0.1i, = 1.0.1b, = 1.0.1a, = 1.0.2c, = 1.0.1p, = 1.0.1o, = 1.0.1l, = 1.0.1k, = 1.0.1d, = 1.0.2dNVD
openssl
NPMNodejs openssl wrapper
NPMNodejs openssl wrapper= 1.0.1m, = 1.0.2a, = 1.0.1j, = 1.0.1, = 1.0.1h, = 1.0.2e, = 1.0.2b, = 1.0.1c, = 1.0.1g, = 1.0.2, = 1.0.1n, = 1.0.1f, = 1.0.1e, = 1.0.1q, = 1.0.1i, = 1.0.1b, = 1.0.1a, = 1.0.2c, = 1.0.1p, = 1.0.1o, = 1.0.1l, = 1.0.1k, = 1.0.1d, = 1.0.2dNVD
Crates.io