Provide references for further information: Can you share references or external links related to CVE-2015-0253?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bz.apache.org/bugzilla/show_bug.cgi?id=57531'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://httpd.apache.org/security/vulnerabilities_24.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/apache/httpd/commit/6a974059190b8a0c7e499f4ab12fe108127099cb'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apache.org/dist/httpd/CHANGES_2.4'}, {'name': 'RHSA-2015:1666', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1666.html'}, {'name': '1032967', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032967'}, {'name': 'APPLE-SA-2015-08-13-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html'}, {'name': '75964', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75964'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT205031'}, {'name': 'APPLE-SA-2015-09-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205219'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/apache/httpd/commit/be0f5335e3e73eb63253b050fdc23f252f5c8ae3'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [9/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/ra7f6aeb28661fbf826969526585f16856abc4615877875f9d3b35ef4%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1888194 [9/13] - /httpd/site/trunk/content/security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210603 svn commit: r1075360 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd336919f655b7ff309385e34a143e41c503e133da80414485b3abcc9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0253?


Explain the CVE ID: What does the identifier CVE-2015-0254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0254.

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.


Provide references for further information: Can you share references or external links related to CVE-2015-0254?

{'name': 'USN-2551-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2551-1'}, {'name': 'RHSA-2016:1376', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1376'}, {'name': 'RHSA-2016:1841', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1841.html'}, {'name': '[tomcat-taglibs-user] 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/tomcat-taglibs-user/201502.mbox/%3C82207A16-6348-4DEE-877E-F7B87292576A%40apache.org%3E'}, {'name': 'RHSA-2016:1838', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1838.html'}, {'name': '20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534772/100/0/threaded'}, {'name': 'RHSA-2015:1695', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1695.html'}, {'name': 'RHSA-2016:1839', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1839.html'}, {'name': 'openSUSE-SU-2015:1751', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-10/msg00033.html'}, {'name': '72809', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72809'}, {'name': 'RHSA-2016:1840', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1840.html'}, {'name': '1034934', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034934'}, {'name': '[tomcat-dev] 20190319 svn commit: r1855831 [27/30] - in /tomcat/site/trunk: ./ docs/ xdocs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200203 svn commit: r1873527 [27/30] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d%40%3Cdev.tomcat.apache.org%3E'}, {'name': '[tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpuapr2020.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'name': '[portals-pluto-dev] 20210714 [jira] [Closed] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38%40%3Cpluto-dev.portals.apache.org%3E'}, {'name': '[portals-pluto-scm] 20210714 [portals-pluto] branch master updated: PLUTO-792 Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077%40%3Cpluto-scm.portals.apache.org%3E'}, {'name': '[portals-pluto-dev] 20210714 [jira] [Created] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f%40%3Cpluto-dev.portals.apache.org%3E'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com//security-alerts/cpujul2021.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0254?


Explain the CVE ID: What does the identifier CVE-2015-0255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0255.

X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.


Provide references for further information: Can you share references or external links related to CVE-2015-0255?

{'name': 'openSUSE-SU-2015:0337', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-02/msg00085.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'GLSA-201504-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201504-06'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advisories.mageia.org/MGASA-2015-0073.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': '72578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72578'}, {'name': 'MDVSA-2015:119', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:119'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'DSA-3160', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3160'}, {'name': 'USN-2500-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2500-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2015-02-10/'}, {'name': 'openSUSE-SU-2015:0338', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-02/msg00086.html'}, {'name': 'RHSA-2015:0797', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0797.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0255?


Explain the CVE ID: What does the identifier CVE-2015-0256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0256.


Provide references for further information: Can you share references or external links related to CVE-2015-0256?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0256?


Explain the CVE ID: What does the identifier CVE-2015-0257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0257.

Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup, which allows local users to obtain sensitive information by reading files in the directory.


Provide references for further information: Can you share references or external links related to CVE-2015-0257?

{'name': '1032231', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032231'}, {'name': 'RHSA-2015:0888', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0888.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0257?


Explain the CVE ID: What does the identifier CVE-2015-0258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0258.

Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.


Provide references for further information: Can you share references or external links related to CVE-2015-0258?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/133736/Collabtive-2.0-Shell-Upload.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/philippK-de/Collabtive/commit/9ce6301583669d0a8ecb4d23fb56e34b68511335'}, {'name': '[debian-lts-announce] 20200228 [SECURITY] [DLA 2125-1] collabtive security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/02/msg00031.html'}, {'name': 'USN-4590-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4590-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0258?


Explain the CVE ID: What does the identifier CVE-2015-0259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0259.

OpenStack Compute (Nova) before 2014.1.4, 2014.2.x before 2014.2.3, and kilo before kilo-3 does not validate the origin of websocket requests, which allows remote attackers to hijack the authentication of users for access to consoles via a crafted webpage.


Provide references for further information: Can you share references or external links related to CVE-2015-0259?

{'name': '[openstack-announce] 20150313 [OSSA 2015-005] Nova console Cross-Site WebSocket hijacking (CVE-2015-0259)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.openstack.org/pipermail/openstack-announce/2015-March/000341.html'}, {'name': 'RHSA-2015:0844', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0844.html'}, {'name': 'RHSA-2015:0790', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0790.html'}, {'name': 'RHSA-2015:0843', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0843.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/nova/+bug/1409142'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0259?


Explain the CVE ID: What does the identifier CVE-2015-0260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0260.

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.


Provide references for further information: Can you share references or external links related to CVE-2015-0260?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kallithea-scm.org/security/cve-2015-0260.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://rhodecode.com/blog/rhodecode-enterprise-security-release/'}, {'name': 'kallithea-cve20150260-info-disc(100888)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100888'}, {'name': '72573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72573'}, {'name': "[oss-security] 20150210 CVE-2015-0260: Kallithea: API key of repository's creator exposed by get_repo API method", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2015/q1/505'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0260?


Explain the CVE ID: What does the identifier CVE-2015-0261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0261.

Integer signedness error in the mobility_opt_print function in the IPv6 mobility printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) or possibly execute arbitrary code via a negative length value.


Provide references for further information: Can you share references or external links related to CVE-2015-0261?

{'name': 'FEDORA-2015-4939', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153834.html'}, {'name': 'MDVSA-2015:125', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:125'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/130730/tcpdump-Denial-Of-Service-Code-Execution.html'}, {'name': 'RHSA-2017:1871', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1871'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': '1031937', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031937'}, {'name': 'GLSA-201510-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201510-04'}, {'name': 'FEDORA-2015-4804', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153999.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advisories.mageia.org/MGASA-2015-0114.html'}, {'name': 'USN-2580-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2580-1'}, {'name': '20150309 tcpdump 4.7.2 remote crashes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534829/100/0/threaded'}, {'name': 'openSUSE-SU-2015:0616', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00084.html'}, {'name': 'MDVSA-2015:182', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:182'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1201792'}, {'name': '73019', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73019'}, {'name': 'DSA-3193', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3193'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0261?


Explain the CVE ID: What does the identifier CVE-2015-0262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0262.


Provide references for further information: Can you share references or external links related to CVE-2015-0262?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0262?


Explain the CVE ID: What does the identifier CVE-2015-0263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0263.

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource.


Provide references for further information: Can you share references or external links related to CVE-2015-0263?

{'name': 'RHSA-2015:1539', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1539.html'}, {'name': 'RHSA-2015:1041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1041.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=7d19340bcdb42f7aae584d9c5003ac4f7ddaee36'}, {'name': 'RHSA-2015:1538', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1538.html'}, {'name': '1032442', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032442'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://camel.apache.org/security-advisories.data/CVE-2015-0263.txt.asc'}, {'name': '[camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E'}, {'name': '[camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0263?


Explain the CVE ID: What does the identifier CVE-2015-0264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0264.

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an invalid XML (1) String or (2) GenericFile object in an XPath query.


Provide references for further information: Can you share references or external links related to CVE-2015-0264?

{'name': 'RHSA-2015:1539', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1539.html'}, {'name': '1032442', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id/1032442'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git-wip-us.apache.org/repos/asf?p=camel.git%3Ba=commitdiff%3Bh=1df559649a96a1ca0368373387e542f46e4820da'}, {'name': 'RHSA-2015:1041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1041.html'}, {'name': 'RHSA-2015:1538', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1538.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc'}, {'name': '[camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E'}, {'name': '[camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0264?


Explain the CVE ID: What does the identifier CVE-2015-0265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0265.

Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header.


Provide references for further information: Can you share references or external links related to CVE-2015-0265?

{'name': '[ranger-dev] 20150805 CVEs fixed in Ranger 0.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger'}, {'name': '76208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76208'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0265?


Explain the CVE ID: What does the identifier CVE-2015-0266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0266.

The Policy Admin Tool in Apache Ranger before 0.5.0 allows remote authenticated users to bypass intended access restrictions via direct access to module URLs.


Provide references for further information: Can you share references or external links related to CVE-2015-0266?

{'name': '[ranger-dev] 20150805 CVEs fixed in Ranger 0.5', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel%40apache.org%3E'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security'}, {'name': '76221', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76221'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0266?


Explain the CVE ID: What does the identifier CVE-2015-0267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0267.

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.


Provide references for further information: Can you share references or external links related to CVE-2015-0267?

{'name': '74622', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74622'}, {'name': 'RHSA-2015:0986', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0986.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0267?


Explain the CVE ID: What does the identifier CVE-2015-0268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0268.

The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a denial of service (host crash) by writing an invalid value to the GICD.SGIR register.


Provide references for further information: Can you share references or external links related to CVE-2015-0268?

{'name': 'xen-cve20150268-dos(100868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/100868'}, {'name': '1031746', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031746'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xenbits.xen.org/xsa/advisory-117.html'}, {'name': '72591', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72591'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0268?


Explain the CVE ID: What does the identifier CVE-2015-0269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0269.

Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0269?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://contao.org/en/news/contao-3_2_19.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://contao.org/en/news/directory-traversal-vulnerability-cve-2015-0269.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://contao.org/en/news/contao-3_4_4.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0269?


Explain the CVE ID: What does the identifier CVE-2015-0270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0270.

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.


Provide references for further information: Can you share references or external links related to CVE-2015-0270?

{'tags': ['x_refsource_MISC'], 'url': 'https://framework.zend.com/security/advisory/ZF2015-02'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0270?


Explain the CVE ID: What does the identifier CVE-2015-0271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0271.

The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path.


Provide references for further information: Can you share references or external links related to CVE-2015-0271?

{'name': 'RHSA-2015:0841', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0841.html'}, {'name': 'RHSA-2015:0645', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0645.html'}, {'name': 'RHSA-2015:0840', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0840.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0271?


Explain the CVE ID: What does the identifier CVE-2015-0272 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0272.

GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.


Provide references for further information: Can you share references or external links related to CVE-2015-0272?

{'name': 'SUSE-SU-2015:2292', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00018.html'}, {'name': 'USN-2792-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2792-1'}, {'name': 'SUSE-SU-2015:2350', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00031.html'}, {'name': 'SUSE-SU-2015:2194', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00005.html'}, {'name': 'SUSE-SU-2016:0354', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00013.html'}, {'name': 'SUSE-SU-2015:2339', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00026.html'}, {'name': 'SUSE-SU-2015:2108', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00035.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'name': '76814', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/76814'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d5fc88e573fa58b93034b04d35a2454f5d28cad9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1192132'}, {'name': 'SUSE-SU-2016:2074', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00038.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0272?


Explain the CVE ID: What does the identifier CVE-2015-0273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0273.

Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remote attackers to execute arbitrary code via crafted serialized input containing a (1) R or (2) r type specifier in (a) DateTimeZone data handled by the php_date_timezone_initialize_from_hash function or (b) DateTime data handled by the php_date_initialize_from_hash function.


Provide references for further information: Can you share references or external links related to CVE-2015-0273?

{'name': 'DSA-3195', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3195'}, {'name': 'APPLE-SA-2015-10-21-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205375'}, {'name': 'USN-2535-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2535-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.php.net/bug.php?id=68942'}, {'name': 'APPLE-SA-2015-09-30-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'MDVSA-2015:079', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:079'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'openSUSE-SU-2015:0440', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00004.html'}, {'name': 'SSRT102066', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=143403519711434&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://php.net/ChangeLog-5.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1194730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205267'}, {'name': 'SUSE-SU-2015:0436', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html'}, {'name': '1031945', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031945'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT204942'}, {'name': '72701', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/72701'}, {'name': 'SUSE-SU-2015:0424', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00002.html'}, {'name': 'RHSA-2015:1135', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1135.html'}, {'name': 'RHSA-2015:1053', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1053.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=71335e6ebabc1b12c057d8017fd811892ecdfd24'}, {'name': 'HPSBUX03337', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=143403519711434&w=2'}, {'name': 'GLSA-201606-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201606-10'}, {'name': 'RHSA-2015:1066', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1066.html'}, {'name': 'RHSA-2015:1218', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1218.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0273?


Explain the CVE ID: What does the identifier CVE-2015-0274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0274.

The XFS implementation in the Linux kernel before 3.15 improperly uses an old size value during remote attribute replacement, which allows local users to cause a denial of service (transaction overrun and data corruption) or possibly gain privileges by leveraging XFS filesystem access.


Provide references for further information: Can you share references or external links related to CVE-2015-0274?

{'name': 'USN-2544-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2544-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59'}, {'name': 'RHSA-2015:0694', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0694.html'}, {'name': 'RHSA-2015:0290', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0290.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1195248'}, {'name': '1031853', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1031853'}, {'name': 'USN-2543-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2543-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8275cdd0e7ac550dcce2b3ef6d2fb3b808c1ae59'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0274?


Explain the CVE ID: What does the identifier CVE-2015-0275 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0275.

The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.


Provide references for further information: Can you share references or external links related to CVE-2015-0275?

{'name': '1034454', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034454'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1193907'}, {'name': '[linux-ext4] 20150218 [PATCH] ext4: Allocate entire range in zero range', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.spinics.net/lists/linux-ext4/msg47193.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0f2af21aae11972fa924374ddcf52e88347cf5a8'}, {'name': 'RHSA-2015:1778', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1778.html'}, {'name': 'RHSA-2015:1787', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1787.html'}, {'name': '75139', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/75139'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/0f2af21aae11972fa924374ddcf52e88347cf5a8'}, {'name': '[oss-security] 20150223 CVE-2015-0275 -- Linux kernel: fs: ext4: fallocate zero range page size > block size BUG()', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/02/23/14'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.f5.com/csp/article/K05211147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0275?


Explain the CVE ID: What does the identifier CVE-2015-0276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0276.

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.


Provide references for further information: Can you share references or external links related to CVE-2015-0276?

{'name': "[oss-security] 20150410 CVE-2015-0276: Kallithea: Lack of CSRF attack protection enables gaining unauthorised access to users' accounts", 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/04/10/8'}, {'name': '74052', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/74052'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kallithea-scm.org/security/cve-2015-0276.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0276?


Explain the CVE ID: What does the identifier CVE-2015-0277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0277.

The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion.  NOTE: this identifier has been SPLIT per ADT2 due to different vulnerability types. See CVE-2015-6254 for lack of validation for the Destination attribute in a Response element in a SAML assertion.


Provide references for further information: Can you share references or external links related to CVE-2015-0277?

{'name': 'RHSA-2015:0849', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0849.html'}, {'name': 'RHSA-2015:0848', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0848.html'}, {'name': 'RHSA-2015:0846', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0846.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1194832'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.jboss.org/browse/PLINK-678'}, {'name': 'RHSA-2015:0847', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0847.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0277?


Explain the CVE ID: What does the identifier CVE-2015-0278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0278.

libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0278?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21msg/libuv/0JZxwLMtsMI/jraczskYWWQJ'}, {'name': 'MDVSA-2015:228', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:228'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advisories.mageia.org/MGASA-2015-0186.html'}, {'name': 'FEDORA-2015-2313', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/pipermail/package-announce/2015-February/150526.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libuv/libuv/pull/215'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libuv/libuv/commit/66ab38918c911bcff025562cf06237d7fedaba0c'}, {'name': 'GLSA-201611-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201611-10'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0278?


Explain the CVE ID: What does the identifier CVE-2015-0279 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0279.

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the do parameter.


Provide references for further information: Can you share references or external links related to CVE-2015-0279?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1192140'}, {'name': 'RHSA-2015:0719', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0719.html'}, {'name': 'JVN#56297719', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN56297719/index.html'}, {'name': 'JVNDB-2015-001959', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-001959.html'}, {'name': '20190723 Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2019/Jul/21'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/153734/Tufin-Secure-Change-Remote-Code-Execution.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/156663/Richsploit-RichFaces-Exploitation-Toolkit.html'}, {'name': '20200313 RichFaces exploitation toolkit', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2020/Mar/21'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0279?


Explain the CVE ID: What does the identifier CVE-2015-0280 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0280.


Provide references for further information: Can you share references or external links related to CVE-2015-0280?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0280?


Explain the CVE ID: What does the identifier CVE-2015-0281 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0281.


Provide references for further information: Can you share references or external links related to CVE-2015-0281?


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0281?


Explain the CVE ID: What does the identifier CVE-2015-0282 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0282.

GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers to conduct downgrade attacks via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0282?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gnutls.org/security.html'}, {'name': 'DSA-3191', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2015/dsa-3191'}, {'name': '73119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73119'}, {'name': 'RHSA-2015:1457', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1457.html'}, {'name': '1032148', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1032148'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0282?


Explain the CVE ID: What does the identifier CVE-2015-0283 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0283.

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.


Provide references for further information: Can you share references or external links related to CVE-2015-0283?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097'}, {'name': 'FEDORA-2015-4747', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154314.html'}, {'name': 'FEDORA-2015-4788', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/154103.html'}, {'name': '73377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/73377'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1195729'}, {'name': 'RHSA-2015:0728', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0728.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0283?


Explain the CVE ID: What does the identifier CVE-2015-0284 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0284.

Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenticated users to inject arbitrary web script or HTML via crafted XML data to the XMLRPC API, involving user details.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7811.


Provide references for further information: Can you share references or external links related to CVE-2015-0284?

{'name': 'RHSA-2016:0590', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0590.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1181472'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/spacewalkproject/spacewalk/commit/dd418384171473c3e31386a1b4792f8c555dc744'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1315398'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1314906'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1181152'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/spacewalkproject/spacewalk/commit/f3792c79c1c251a49cc4e382be8591636326a794'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0284?


Explain the CVE ID: What does the identifier CVE-2015-0285 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0285.

The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.


Provide references for further information: Can you share references or external links related to CVE-2015-0285?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=e1b568dd2462f7cacf98f3d117936c34e2849a6b'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202410'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': '73234', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73234'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0285?


Explain the CVE ID: What does the identifier CVE-2015-0286 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0286.

The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.


Provide references for further information: Can you share references or external links related to CVE-2015-0286?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://support.apple.com/HT205212'}, {'name': 'APPLE-SA-2015-09-30-3', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'name': '1032917', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1032917'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'url': 'https://support.apple.com/HT205267'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202366'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c3c7fb07dc975dc3c9de0eddb7d8fd79fc9c67c1'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'APPLE-SA-2015-09-16-1', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'HPSBMU03413', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050254401665&w=2'}, {'name': '73225', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73225'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0286?


Explain the CVE ID: What does the identifier CVE-2015-0287 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0287.

The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.


Provide references for further information: Can you share references or external links related to CVE-2015-0287?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=b717b083073b6cacc0a5e2397b661678aff7ae7f'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://support.apple.com/HT205212'}, {'name': '73227', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73227'}, {'name': 'APPLE-SA-2015-09-30-3', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'url': 'https://support.apple.com/HT205267'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'APPLE-SA-2015-09-16-1', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'SUSE-SU-2016:0678', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202380'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0287?


Explain the CVE ID: What does the identifier CVE-2015-0288 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0288.

The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.


Provide references for further information: Can you share references or external links related to CVE-2015-0288?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'url': 'https://rt.openssl.org/Ticket/Display.html?id=3708&user=guest&pass=guest'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '73237', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73237'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202418'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'HPSBMU03413', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050254401665&w=2'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=28a00bcd8e318da18031b2ac8778c64147cd54f9'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0288?


Explain the CVE ID: What does the identifier CVE-2015-0289 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0289.

The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.


Provide references for further information: Can you share references or external links related to CVE-2015-0289?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'name': '73231', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73231'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c0334c2c92dd1bc3ad8138ba6e74006c3631b0f9'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'openSUSE-SU-2015:1277', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'HPSBGN03306', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=142841429220765&w=2'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202384'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0289?


Explain the CVE ID: What does the identifier CVE-2015-0290 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0290.

The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2015-0290?

{'name': '73226', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73226'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202345'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=77c77f0a1b9f15b869ca3342186dfbedd1119d0e'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0290?


Explain the CVE ID: What does the identifier CVE-2015-0291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0291.

The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.


Provide references for further information: Can you share references or external links related to CVE-2015-0291?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'name': '73235', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73235'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=76343947ada960b6269090638f5391068daee88d'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202338'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0291?


Explain the CVE ID: What does the identifier CVE-2015-0292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0292.

Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2015-0292?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'DSA-3197', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2015/dsa-3197'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://rt.openssl.org/Ticket/Display.html?id=2608&user=guest&pass=guest'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202395'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': '73228', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73228'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'url': 'http://www.fortiguard.com/advisory/2015-03-24-openssl-vulnerabilities-march-2015'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=d0666f289ac013094bbbf547bfbcd616199b7d2d'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0292?


Explain the CVE ID: What does the identifier CVE-2015-0293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0293.

The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.


Provide references for further information: Can you share references or external links related to CVE-2015-0293?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10110'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'name': 'RHSA-2015:0715', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0715.html'}, {'name': 'openSUSE-SU-2015:0554', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-03/msg00062.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10680'}, {'name': 'USN-2537-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2537-1'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html'}, {'name': 'HPSBMU03409', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050155601375&w=2'}, {'name': 'FEDORA-2015-4303', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152733.html'}, {'url': 'https://bto.bluecoat.com/security-advisory/sa92'}, {'url': 'https://www.openssl.org/news/secadv_20150319.txt'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1202404'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html'}, {'name': 'HPSBMU03380', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143748090628601&w=2'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=86f8fb0e344d62454f8daf3e15236b2b59210756'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'}, {'name': 'FEDORA-2015-4300', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152844.html'}, {'name': 'APPLE-SA-2015-06-30-2', 'tags': ['vendor-advisory'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html'}, {'name': 'FEDORA-2015-6951', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156823.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://access.redhat.com/articles/1384453'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'name': 'HPSBUX03334', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:063', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:063'}, {'name': 'SUSE-SU-2015:0541', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00022.html'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'name': 'RHSA-2015:0716', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0716.html'}, {'url': 'http://support.apple.com/kb/HT204942'}, {'name': 'SUSE-SU-2015:0578', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html'}, {'name': 'FreeBSD-SA-15:06', 'tags': ['vendor-advisory'], 'url': 'https://www.freebsd.org/security/advisories/FreeBSD-SA-15%3A06.openssl.asc'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'name': 'HPSBMU03397', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=144050297101809&w=2'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html'}, {'name': 'RHSA-2015:0752', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0752.html'}, {'name': 'RHSA-2015:0800', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0800.html'}, {'name': '73232', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/73232'}, {'name': '1031929', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1031929'}, {'name': 'SSRT102000', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=143213830203296&w=2'}, {'name': 'MDVSA-2015:062', 'tags': ['vendor-advisory'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2015:062'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': 'FEDORA-2015-4320', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152734.html'}, {'url': 'https://support.citrix.com/article/CTX216642'}, {'name': 'FEDORA-2015-6855', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157177.html'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'name': 'GLSA-201503-11', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201503-11'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0293?


Explain the CVE ID: What does the identifier CVE-2015-0294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0294.

GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.


Provide references for further information: Can you share references or external links related to CVE-2015-0294?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1196323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.debian.org/security/2015/dsa-3191'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2015-0294?


Explain the CVE ID: What does the identifier CVE-2015-0295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2015-0295.

The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file.