VYPR
Unrated severityNVD Advisory· Published Mar 19, 2015· Updated Jun 17, 2026

CVE-2015-1787

CVE-2015-1787

Description

The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • OpenSSL Project/OpenSSLllm-fuzzy6 versions
    >=1.0.2, <1.0.2a+ 5 more
    • (no CPE)range: >=1.0.2, <1.0.2a
    • (no CPE)range: >=1.0.2,<1.0.2a
    • cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*
    • cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*
    • cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

17

News mentions

0

No linked articles in our index yet.