CVE-2015-3196

Currently unrated

Key Information:

Vendor
HP
Status
Icewall Sso
Icewall Sso Agent Option
Vendor
CVE Published:
6 December 2015

Summary

ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/do...
http://lists.opensuse.org/opensuse-updates/2015-12/msg000...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.