CVE-2015-0291: Null Pointer Dereference
A NULL pointer dereference flaw was found in the way OpenSSL handled renegotiation requests with an invalid Signature Algorithms extension. A remote attacker could use this flaw to cause an OpenSSL server to crash.
This issue affects OpenSSL version 1.0.2, and was fixed in version 1.0.2a.
Acknowledgements:
Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges David Ramos of Stanford University as the original reporter.
Other sources
The sigalgs implementation in t1lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signaturealgorithms extension in the ClientHello message during a renegotiation.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0291?
CVE-2015-0291 is considered a moderate severity vulnerability due to the potential for a remote denial of service.
How do I fix CVE-2015-0291?
To mitigate CVE-2015-0291, upgrade OpenSSL to version 1.0.2a or later.
Which versions of OpenSSL are affected by CVE-2015-0291?
OpenSSL versions 1.0.2, 1.0.2-beta1, 1.0.2-beta2, and 1.0.2-beta3 are all affected by CVE-2015-0291.
What impact can CVE-2015-0291 have on my server?
CVE-2015-0291 can cause an OpenSSL server to crash, leading to potential downtime and service interruption.
Is CVE-2015-0291 exploitable remotely?
Yes, CVE-2015-0291 can be exploited remotely by an attacker due to improper handling of renegotiation requests.