Skip to content
OpenAdvisories
Unscored RHSA-2015:0716 9 CVEs

Red Hat Security Advisory: openssl security and bug fix update

Published Sep 15, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.1e-42.ael7b_1.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.1e-42.ael7b_1.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.1e-42.ael7b_1.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.1e-42.ael7b_1.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.1e-42.ael7b_1.4
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.1e-42.ael7b_1.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.1e-42.el7_1.4
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.1e-42.el7_1.4

Vulnerabilities 9

  • Unscored —
    CVE-2015-0209 EPSS 16%

    Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 b…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0286 EPSS 20%

    The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0287

    The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0288

    The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0289

    The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a …

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0292 EPSS 43%

    Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in Open…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0293 EPSS 21%

    The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a a…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-0703

    The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0…

    openssl Debian
  • Unscored —
    CVE-2016-0704

    An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSS…

    openssl Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1196737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202366
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202380
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202384
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202395
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202404
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202418
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0716.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-0209
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0209
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0209
  • article
    https://access.redhat.com/articles/1384453
  • article
    https://openssl.org/news/secadv_20150319.txt
  • report
    https://access.redhat.com/security/cve/CVE-2015-0286
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0286
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0286
  • report
    https://access.redhat.com/security/cve/CVE-2015-0287
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0287
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0287
  • report
    https://access.redhat.com/security/cve/CVE-2015-0288
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0288
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0288
  • report
    https://access.redhat.com/security/cve/CVE-2015-0289
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0289
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0289
  • report
    https://access.redhat.com/security/cve/CVE-2015-0292
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0292
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0292
  • report
    https://access.redhat.com/security/cve/CVE-2015-0293
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0293
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0293
  • report
    https://access.redhat.com/security/cve/CVE-2016-0703
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1310811
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0703
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0703
  • article
    https://www.openssl.org/news/secadv/20160301.txt
  • report
    https://access.redhat.com/security/cve/CVE-2016-0704
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1310814