NetSight
IP …
high7.5

CVE-2015-3194

crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference an…

Impact

crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.

Affected products

VendorProductAffected versions
OpensslOpenssl
Versions 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10
DebianDebian Linux
Versions 7.0, 8.0
NodejsNode.Js
from 0.10.0 before 0.10.41
from 0.12.0 before 0.12.9
from 4.0.0 before 4.2.3
from 5.0.0 before 5.1.1

Weakness classification

CWE-476

References