Skip to content
OpenAdvisories
Unscored RHSA-2015:0066 7 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::client openssl-debuginfo 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::client openssl-devel 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::client openssl-perl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::client openssl-static 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-debuginfo 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-devel 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-perl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-static 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::server openssl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::server openssl-debuginfo 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::server openssl-devel 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::server openssl-perl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::server openssl-static 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-debuginfo 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-devel 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-perl 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-static 0:1.0.1e-30.el6_6.5
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.1e-34.el7_0.7
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.1e-34.el7_0.7

Vulnerabilities 7

  • Unscored —
    CVE-2014-3570 Public exploit EPSS 22%

    The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly cal…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3571 EPSS 22%

    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of servi…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-3572

    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-8275 Public exploit EPSS 15%

    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificat…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0204 Public exploit EPSS 99%

    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0205 Public exploit EPSS 22%

    The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client au…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0206 EPSS 57%

    Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allo…

    openssl openssl Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://www.openssl.org/news/secadv_20150108.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180184
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180185
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180187
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180235
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180239
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180240
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0066.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-3570
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3570
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3570
  • report
    https://access.redhat.com/security/cve/CVE-2014-3571
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3571
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3571
  • report
    https://access.redhat.com/security/cve/CVE-2014-3572
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3572
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3572
  • report
    https://access.redhat.com/security/cve/CVE-2014-8275
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8275
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8275
  • report
    https://access.redhat.com/security/cve/CVE-2015-0204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0204
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0204
  • article
    https://securityblog.redhat.com/2015/03/04/factoring-rsa-export-keys-freak-cve-2015-0204/
  • report
    https://access.redhat.com/security/cve/CVE-2015-0205
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0205
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0205
  • report
    https://access.redhat.com/security/cve/CVE-2015-0206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0206