VYPR
Unrated severityNVD Advisory· Published Mar 19, 2015· Updated Jun 17, 2026

CVE-2015-0290

CVE-2015-0290

Description

The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*
    • cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*
    • cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*
    • (no CPE)range: >=1.0.2 <1.0.2a

Patches

Vulnerability mechanics

References

17

News mentions

0

No linked articles in our index yet.