CVE-2015-0293

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial…

published March 19, 2015

CVSS

—

EPSS

21%

Percentile

97.6

In the wild

Unconfirmed

What it is

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.21247 · 97.6th percentile
Published: 2015-03-19T00:00Z

EPSS history

Timeline

19 MAR 00:00Z
The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial…
cvelistv5