https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:02:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-06127 bdu:2015-06127 https://cve.radiocsirt.org/vuln/bdu:2015-06127 https://cve.radiocsirt.org/vuln/certfr-2015-avi-008 certfr-2015-avi-008 https://cve.radiocsirt.org/vuln/certfr-2015-avi-008 https://cve.radiocsirt.org/vuln/cnvd-2015-00214 cnvd-2015-00214 https://cve.radiocsirt.org/vuln/cnvd-2015-00214 https://cve.radiocsirt.org/vuln/euvd-2026-89204 EUVD-2026-89204 https://cve.radiocsirt.org/vuln/euvd-2026-89204 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0205 <p>The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.</p> <p>The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0205 https://cve.radiocsirt.org/vuln/ghsa-j635-3m2r-m6v7 <p>The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.</p> <p>The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.</p> https://cve.radiocsirt.org/vuln/ghsa-j635-3m2r-m6v7 https://cve.radiocsirt.org/vuln/gsd-2015-0205 gsd-2015-0205 https://cve.radiocsirt.org/vuln/gsd-2015-0205 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 <p>Security update for openssl1</p> <p>Security update for openssl1</p> https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0205 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0205