Skip to content
OpenAdvisories
Unscored RHSA-2015:0800 9 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client openssl 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client openssl-debuginfo 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client openssl-perl 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl-debuginfo 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation openssl-devel 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openssl 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openssl-debuginfo 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openssl-devel 0:0.9.8e-33.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server openssl-perl 0:0.9.8e-33.el5_11

Vulnerabilities 9

  • Unscored —
    CVE-2014-8275 Public exploit EPSS 15%

    OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificat…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0204 Public exploit EPSS 99%

    The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0287

    The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0288

    The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0289

    The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a …

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0292 EPSS 43%

    Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in Open…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2015-0293 EPSS 21%

    The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a a…

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2016-0703

    The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0…

    openssl Debian
  • Unscored —
    CVE-2016-0704

    An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSS…

    openssl Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://www.openssl.org/news/secadv_20150108.txt
  • article
    https://www.openssl.org/news/secadv_20150319.txt
  • article
    https://access.redhat.com/articles/1384453
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180184
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1180187
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202380
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202384
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202395
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202404
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1202418
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0800.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-8275
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-8275
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-8275
  • report
    https://access.redhat.com/security/cve/CVE-2015-0204
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0204
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0204
  • article
    https://securityblog.redhat.com/2015/03/04/factoring-rsa-export-keys-freak-cve-2015-0204/
  • report
    https://access.redhat.com/security/cve/CVE-2015-0287
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0287
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0287
  • article
    https://openssl.org/news/secadv_20150319.txt
  • report
    https://access.redhat.com/security/cve/CVE-2015-0288
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0288
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0288
  • report
    https://access.redhat.com/security/cve/CVE-2015-0289
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0289
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0289
  • report
    https://access.redhat.com/security/cve/CVE-2015-0292
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0292
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0292
  • report
    https://access.redhat.com/security/cve/CVE-2015-0293
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0293
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0293
  • report
    https://access.redhat.com/security/cve/CVE-2016-0703
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1310811
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-0703
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-0703