CVE-2015-0205: Medium severity openssl vulnerability

Published Jan 9, 2015

Updated

The ssl3getcertverify function in s3srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.

Affected Software

25 affected components

OpenSSL OpenSSL=1.0.0a

OpenSSL OpenSSL=1.0.0b

OpenSSL OpenSSL=1.0.0c

OpenSSL OpenSSL=1.0.0d

OpenSSL OpenSSL=1.0.0e

OpenSSL OpenSSL=1.0.0f

OpenSSL OpenSSL=1.0.0g

OpenSSL OpenSSL=1.0.0h

OpenSSL OpenSSL=1.0.0i

OpenSSL OpenSSL=1.0.0j

OpenSSL OpenSSL=1.0.0k

OpenSSL OpenSSL=1.0.0l

OpenSSL OpenSSL=1.0.0m

OpenSSL OpenSSL=1.0.0n

OpenSSL OpenSSL=1.0.0o

OpenSSL OpenSSL=1.0.1a

OpenSSL OpenSSL=1.0.1b

OpenSSL OpenSSL=1.0.1c

OpenSSL OpenSSL=1.0.1d

OpenSSL OpenSSL=1.0.1e

OpenSSL OpenSSL=1.0.1f

OpenSSL OpenSSL=1.0.1g

OpenSSL OpenSSL=1.0.1h

OpenSSL OpenSSL=1.0.1i

OpenSSL OpenSSL=1.0.1j

Event History

Jan 9, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0205?

CVE-2015-0205 is considered a critical vulnerability as it allows remote attackers to bypass client authentication.

How do I fix CVE-2015-0205?

To mitigate CVE-2015-0205, upgrade OpenSSL to version 1.0.0p or 1.0.1k or later.

Which versions of OpenSSL are affected by CVE-2015-0205?

CVE-2015-0205 affects OpenSSL versions 1.0.0a through 1.0.0l and 1.0.1 through 1.0.1j.

What does CVE-2015-0205 vulnerability enable an attacker to do?

CVE-2015-0205 enables attackers to gain access without needing knowledge of a private key.

Is CVE-2015-0205 a local or remote vulnerability?

CVE-2015-0205 is a remote vulnerability that can be exploited over the network.