CVE-2015-1794

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via…

published December 6, 2015

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04980 · 92.2th percentile
Published
2015-12-06T00:00Z
EPSS history
Timeline
  • 06 DEC 00:00Z
    The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via…
    cvelistv5