Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2015-0206

Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.

  • Published: Jan 9, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-0206
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
openssl / openssl 1.0.1j 1.0.1j.x
openssl / openssl 1.0.0n 1.0.0n.x
openssl / openssl 1.0.0c 1.0.0c.x
openssl / openssl 1.0.0i 1.0.0i.x
openssl / openssl 1.0.1h 1.0.1h.x
openssl / openssl 1.0.0m 1.0.0m.x
openssl / openssl 1.0.1c 1.0.1c.x
openssl / openssl 1.0.1g 1.0.1g.x
openssl / openssl 1.0.0h 1.0.0h.x
openssl / openssl 1.0.0e 1.0.0e.x
openssl / openssl 1.0.0f 1.0.0f.x
openssl / openssl 1.0.0d 1.0.0d.x
openssl / openssl 1.0.0j 1.0.0j.x
openssl / openssl 1.0.1a 1.0.1a.x
openssl / openssl 1.0.0o 1.0.0o.x
openssl / openssl 1.0.1d 1.0.1d.x
openssl / openssl 1.0.0k 1.0.0k.x
openssl / openssl 1.0.1b 1.0.1b.x
openssl / openssl 1.0.1e 1.0.1e.x
openssl / openssl 1.0.1f 1.0.1f.x
openssl / openssl 1.0.0l 1.0.0l.x
openssl / openssl 1.0.0a 1.0.0a.x
openssl / openssl 1.0.1i 1.0.1i.x
openssl / openssl 1.0.0b 1.0.0b.x
openssl / openssl 1.0.0g 1.0.0g.x