Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
OpenSSL on Red Hat could let attackers read encrypted data
published 2 years ago
Summary
The OpenSSL libraries provided by Red Hat (including the standard, debug, Perl, and development packages) have a weakness that could let a remote attacker decrypt information they shouldn't see. This could expose sensitive data such as passwords or personal details. Apply the Red Hat security update for OpenSSL as soon as possible to close the gap.
What to do
- Update redhat openssl to version 0:0.9.8e-37.el5_11.
- Update redhat openssl-debuginfo to version 0:0.9.8e-37.el5_11.
- Update redhat openssl-perl to version 0:0.9.8e-37.el5_11.
- Update redhat openssl-devel to version 0:0.9.8e-37.el5_11.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | redhat | openssl |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::client | redhat | openssl-debuginfo |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::client | redhat | openssl-perl |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | openssl |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | openssl-debuginfo |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::client_workstation | redhat | openssl-devel |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::server | redhat | openssl |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::server | redhat | openssl-debuginfo |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::server | redhat | openssl-devel |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
| Red Hat:enterprise_linux:5::server | redhat | openssl-perl |
< 0:0.9.8e-37.el5_11 Fix: upgrade to 0:0.9.8e-37.el5_11
|
Original advisory text
Red Hat Security Advisory: openssl security update
References
- https://access.redhat.com/errata/RHSA-2015:2616 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://openssl.org/news/secadv/20151203.txt Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1288322 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2616.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2015-3195 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2015-3195 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2015-3195 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Sep 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2015:2616 · OSV
Track software like this
Free during beta