CVE-2015-1788

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.

Severity	MEDIUM
CVSS	4.3
CWE	CWE-399
KEV
Published	10 years ago
Modified	1 week ago

Related Products

Product	Advisory	Evidence
UCS B-Series Blade Server Software	cisco-sa-20150612-openssl	Cisco OpenVuln
TANDBERG Codec	cisco-sa-20150612-openssl	Cisco OpenVuln
Plug-in for OpenFlow	cisco-sa-20150612-openssl	Cisco OpenVuln
Intrusion Prevention System (IPS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Headend System Releases	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco onePK All-in-One Virtual Machine	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Wireless LAN Controller (WLC)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Wide Area Application Services (WAAS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Webex Meetings	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco WebEx Social	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco WebEx Node for MCS	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco WebEx Meetings for Android	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco WebEx Meetings Server	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Web Security Appliance (WSA)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Visual Quality Experience	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Virtualization Experience Media Engine	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Virtual Security Gateway for Nexus 1000V Series Switches	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Videoscape Distribution Suite Service Broker	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Videoscape Control Suite	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Video Surveillance PTZ IP Cameras	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Video Surveillance Operations Manager Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Video Surveillance Media Server Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Video Surveillance 7000 Series IP Cameras	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Video Surveillance 6000 Series IP Cameras	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Video Surveillance 4000 Series IP Camera	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Video Surveillance 3000 Series IP Cameras	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Universal Small Cell Series Firmware	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unity Connection	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unity	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified SIP Proxy	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Presence Server	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Intelligence Center	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified IP Phones 9900 Series Firmware	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified IP Phone 8945	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified IP Phone 8900 Series	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified IP Phone 7900 Series	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified IP Conference Station 7937G Firmware	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Contact Center Express	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Contact Center Enterprise	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Contact Center	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Computing System Central Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Computing System (Standalone)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Computing System (Management Software)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Computing System (Managed)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Communications Manager	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Communications Domain Manager	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified Attendant Console	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Unified 7800 Series IP Phones	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco UCS B-Series Blade Server Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Telepresence MXP Series Endpoints	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Telepresence Conductor	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence TX9000	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence TX900	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence TX1310 65	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence TX1300 47	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence TE Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence TC Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence System Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence Supervisor MSE 8050 Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence Server Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence Server	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence Serial Gateway Series	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence MCU Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence ISDN Link	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence ISDN GW 3241	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence Advanced Media Gateway	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TelePresence	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco TANDBERG Codec	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco SocialMiner	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Small Business SPA500 Series IP Phones	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Small Business SPA300 Series IP Phones	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Small Business RV Series Router Firmware	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Small Business 500 Series Stackable Managed Switches	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Small Business 300 Series Managed Switches	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Small Business 200 Series Smart Switches	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Show and Share	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Service Control Engine (SCE)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Security Manager	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Secure Web Appliance	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Secure Email and Web Manager	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Secure Email	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Secure Client	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco SPA232D Multi-Line DECT ATA	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco SPA122 ATA with Router	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco SPA112 2-Port Phone Adapter	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Registered Envelope Service	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Security Manager (PRSM)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Performance Manager	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Optical	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Network Services Controller	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Network Registrar	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Network	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime License Manager	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime LAN Management Solution (LMS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Infrastructure	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime IP Express	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Data Center Network Manager (DCNM)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Collaboration Provisioning	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Collaboration Deployment	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Collaboration Assurance	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Collaboration	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Prime Access Registrar	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Plug-in for OpenFlow	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Physical Access Gateway	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Paging Server	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Packet Tracer	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco ONS 15454 System Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Nexus 3000 Series Switch	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Nexus 1000V Switch	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Nexus 1000V InterCloud for VMware	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Network Analysis Module (NAM) Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Network Admission Control Guest Server	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco NetFlow Collection Engine	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco NX-OS Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco NAC Appliance Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Model D9485 DAVIC QPSK Mod / Demod	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Mobility Services Engine	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MeetingPlace Server	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MediaSense	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MXE 5600 Media Experience Engine	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MXE 3500 (Media Experience Engine)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MDS SAN-OS Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MATE Live	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MATE Design	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco MATE Collector	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber for iOS	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber for Windows	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber for Mac	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber Video for TelePresence (Movi)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber Software Development Kit	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber IM for Android	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber Guest	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Jabber	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco IronPort Encryption Appliance	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Intrusion Prevention System (IPS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Internet Streamer Content Delivery System (CDS-IS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Internet Streamer Content Delivery System (CDS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Identity Services Engine Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco IP phone	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco IP Phone 8800 Series Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco IP Interoperability and Collaboration System (IPICS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco IOS XR Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco IOS XE Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco IOS	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Hosted Collaboration Solution	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Hosted Collaboration Mediation Fulfillment	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Headend System Releases	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Firepower System Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Finesse	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Expressway	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Enterprise Content Delivery System (ECDS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Emergency Responder	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Email Security Appliance (ESA)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Edge 300 Series	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Digital Media Player Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco DX Series IP Phones	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco D9036 Modular Encoding Platform	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Content Security Management Appliance (SMA)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Connected Grid Network Management System (CG-NMS)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Computer Telephony Integration (CTI) Option	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Cloupia Unified Infrastructure Controller	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Application and Content Networking System (ACNS) Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Application Policy Infrastructure Controller (APIC)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Application Networking Manager (ANM)	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco AnyRes Live	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco AnyConnect Secure Mobility Client	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Agent Desktop	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Adaptive Security Appliance (ASA) Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco ATA 187 Analog Telephone Adaptor	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco ASR 5000 Series Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco ASA CX Context-Aware Security Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco ACE Application Control Engine Module	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco ACE 4700 Series Application Control Engine Appliances	cisco-sa-20150612-openssl	Cisco OpenVuln
Application and Content Networking System (ACNS) Software	cisco-sa-20150612-openssl	Cisco OpenVuln
Cisco Catalyst 9600 Series Switches	cisco-sa-20150612-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches	cisco-sa-20150612-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches	cisco-sa-20150612-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches	cisco-sa-20150612-openssl	Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches	cisco-sa-20150612-openssl	Cisco OpenVuln · software-dependent