CVE-2015-3195 Information disclosure in n/a

Medium 5.3 Published 6 Dec 2015 Updated 6 Aug 2024

Remote attackers can read sensitive process memory by triggering a decoding failure in PKCS#7 or CMS applications using OpenSSL.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2015-3195?

CVE-2015-3195 is a medium-severity vulnerability in Apple Mac Os X, published on 6 Dec 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.

Weakness: CWE-200

Which versions are affected by CVE-2015-3195?

It affects 25 products.

Linux distribution packages (29)

`openssl` Red Hat:enterprise_linux:5::client	All versions	`0:0.9.8e-37.el5_11`
`openssl-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:0.9.8e-37.el5_11`
`openssl-perl` Red Hat:enterprise_linux:5::client	All versions	`0:0.9.8e-37.el5_11`
`openssl` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:0.9.8e-37.el5_11`
`openssl-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:0.9.8e-37.el5_11`
`openssl-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:0.9.8e-37.el5_11`
`openssl` Red Hat:enterprise_linux:5::server	All versions	`0:0.9.8e-37.el5_11`
`openssl-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:0.9.8e-37.el5_11`
`openssl-devel` Red Hat:enterprise_linux:5::server	All versions	`0:0.9.8e-37.el5_11`
`openssl-perl` Red Hat:enterprise_linux:5::server	All versions	`0:0.9.8e-37.el5_11`
`compat-openssl097g` SUSE:Linux Enterprise Desktop 11 SP3	All versions	`0.9.7g-146.22.36.1`
`openssl` SUSE:Linux Enterprise Desktop 11 SP3	All versions	`0.9.8j-0.80.1`
`compat-openssl097g` SUSE:Linux Enterprise Desktop 11 SP4	All versions	`0.9.7g-146.22.36.1`
`openssl` SUSE:Linux Enterprise Desktop 11 SP4	All versions	`0.9.8j-0.80.1`
`compat-openssl098` SUSE:Linux Enterprise Desktop 12	All versions	`0.9.8j-87.1`
`compat-openssl098` SUSE:Linux Enterprise Desktop 12 SP1	All versions	`0.9.8j-87.1`
`compat-openssl098` SUSE:Linux Enterprise Module for Legacy 12	All versions	`0.9.8j-87.1`
`openssl` SUSE:Linux Enterprise Server 11 SP2-LTSS	All versions	`0.9.8j-0.80.1`
`openssl` SUSE:Linux Enterprise Server 11 SP3	All versions	`0.9.8j-0.80.1`
`openssl` SUSE:Linux Enterprise Server 11 SP3-TERADATA	All versions	`0.9.8j-0.80.1`
`openssl` SUSE:Linux Enterprise Server 11 SP4	All versions	`0.9.8j-0.80.1`
`compat-openssl097g` SUSE:Linux Enterprise Server for SAP Applications 11 SP2	All versions	`0.9.7g-146.22.36.1`
`compat-openssl097g` SUSE:Linux Enterprise Server for SAP Applications 11 SP3	All versions	`0.9.7g-146.22.36.1`
`openssl` SUSE:Linux Enterprise Server for SAP Applications 11 SP3	All versions	`0.9.8j-0.80.1`
`compat-openssl097g` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	All versions	`0.9.7g-146.22.36.1`
`openssl` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	All versions	`0.9.8j-0.80.1`
`openssl` SUSE:Linux Enterprise Software Development Kit 11 SP3	All versions	`0.9.8j-0.80.1`
`openssl` SUSE:Linux Enterprise Software Development Kit 11 SP4	All versions	`0.9.8j-0.80.1`
`openssl` SUSE:Studio Onsite 1.3	All versions	`0.9.8j-0.80.1`

Products include Apple Mac Os X, Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Openssl Openssl, Opensuse Leap and 19 more.

How do I fix CVE-2015-3195?

Upgrade to a fixed version.

Is CVE-2015-3195 being exploited?

There is no known exploitation of CVE-2015-3195 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

All Apple Mac Os X vulnerabilities

Sources

Also known as DEBIAN-CVE-2015-3195, DLA-358-1, GHSA-7q2f-v729-wjf3, RHSA-2015:2616, SUSE-SU-2015:2251-1, SUSE-SU-2015:2275-1 and 2 more.