CVE-2015-0288: Null Pointer Dereference
A NULL pointer dereference flaw was found in OpenSSL's X509toX509REQ() function. A remote attacker could use this flaw to crash an OpenSSL server with an invalid certificate key. Note that this function is rarely used in practice.
This issue affects OpenSSL versions: 1.0.2, 1.0.1, 1.0.0, and 0.9.8. This issue is fixed in versions: 1.0.2a, 1.0.1m, 1.0.0r, and 0.9.8zf.
Upstream patch:
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=28a00bcd8e318da18031b2ac8778c64147cd54f9
Acknowledgements:
Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Brian Carpenter as the original reporter.
Other sources
The X509toX509REQ function in crypto/x509/x509req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0288?
CVE-2015-0288 has a moderate severity level as it can lead to denial of service due to a NULL pointer dereference in OpenSSL.
What versions of OpenSSL are affected by CVE-2015-0288?
CVE-2015-0288 affects OpenSSL versions 1.0.2, 1.0.1, 1.0.0, and 0.9.8.
How do I fix CVE-2015-0288?
To fix CVE-2015-0288, you should upgrade your OpenSSL to version 1.0.2 or higher.
Can CVE-2015-0288 be exploited remotely?
Yes, CVE-2015-0288 can be exploited by a remote attacker using an invalid certificate key.
What function in OpenSSL is impacted by CVE-2015-0288?
CVE-2015-0288 impacts the X509_to_X509_REQ() function in OpenSSL.