Back to search
CVE-2014-8275
Published: Jan 9, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
HPSBOV03318
vendor-advisory
x_refsource_HP
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
x_refsource_CONFIRM
openSUSE-SU-2015:0130
vendor-advisory
x_refsource_SUSE
20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
vendor-advisory
x_refsource_CISCO
HPSBGN03299
vendor-advisory
x_refsource_HP
HPSBMU03409
vendor-advisory
x_refsource_HP
https://support.apple.com/HT204659
x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
x_refsource_CONFIRM
HPSBMU03380
vendor-advisory
x_refsource_HP
FEDORA-2015-0601
vendor-advisory
x_refsource_FEDORA
1033378
vdb-entry
x_refsource_SECTRACK
HPSBHF03289
vendor-advisory
x_refsource_HP
openSUSE-SU-2016:0640
vendor-advisory
x_refsource_SUSE
https://www.openssl.org/news/secadv_20150108.txt
x_refsource_CONFIRM
MDVSA-2015:019
vendor-advisory
x_refsource_MANDRIVA
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
x_refsource_CONFIRM
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679
x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
x_refsource_CONFIRM
openSUSE-SU-2015:1277
vendor-advisory
x_refsource_SUSE
RHSA-2015:0066
vendor-advisory
x_refsource_REDHAT
HPSBUX03244
vendor-advisory
x_refsource_HP
APPLE-SA-2015-04-08-2
vendor-advisory
x_refsource_APPLE
https://kc.mcafee.com/corporate/index?page=content&id=SB10108
x_refsource_CONFIRM
SUSE-SU-2015:0578
vendor-advisory
x_refsource_SUSE
https://kc.mcafee.com/corporate/index?page=content&id=SB10102
x_refsource_CONFIRM
SUSE-SU-2015:0946
vendor-advisory
x_refsource_SUSE
HPSBMU03397
vendor-advisory
x_refsource_HP
71935
vdb-entry
x_refsource_BID
RHSA-2015:0800
vendor-advisory
x_refsource_REDHAT
HPSBMU03396
vendor-advisory
x_refsource_HP
HPSBUX03162
vendor-advisory
x_refsource_HP
SSRT101987
vendor-advisory
x_refsource_HP
MDVSA-2015:062
vendor-advisory
x_refsource_MANDRIVA
https://support.citrix.com/article/CTX216642
x_refsource_CONFIRM
HPSBMU03413
vendor-advisory
x_refsource_HP
SSRT101885
vendor-advisory
x_refsource_HP
https://bto.bluecoat.com/security-advisory/sa88
x_refsource_CONFIRM
DSA-3125
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now