Scribd Logo
Upload

Welcome to Scribd!

  • 33 views

    Bug Search: Description

    Uploaded by

    nag_nag19
    This document summarizes a Cisco bug report about vulnerabilities in OpenSSL. The bug report identifies 5 OpenSSL vulnerabilities from March 2015 that affected Cisco products. It provides the software versions that addressed the vulnerabilities. The report also includes a CVSS risk score of 7.1 for the vulnerabilities and links to more information.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Bug Search: Description

    Uploaded by

    nag_nag19
    33 views2 pages
    This document summarizes a Cisco bug report about vulnerabilities in OpenSSL. The bug report identifies 5 OpenSSL vulnerabilities from March 2015 that affected Cisco products. It provides the software versions that addressed the vulnerabilities. The report also includes a CVSS risk score of 7.1 for the vulnerabilities and links to more information.

    Original Description:

    Cisco bug4

    Original Title

    CSCut46019

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document summarizes a Cisco bug report about vulnerabilities in OpenSSL. The bug report identifies 5 OpenSSL vulnerabilities from March 2015 that affected Cisco products. It provides the software versions that addressed the vulnerabilities. The report also includes a CVSS risk score of 7.1 for the vulnerabilities and links to more information.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    33 views2 pages

    Bug Search: Description

    Uploaded by

    nag_nag19
    This document summarizes a Cisco bug report about vulnerabilities in OpenSSL. The bug report identifies 5 OpenSSL vulnerabilities from March 2015 that affected Cisco products. It provides the software versions that addressed the vulnerabilities. The report also includes a CVSS risk score of 7.1 for the vulnerabilities and links to more information.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 2

    Bug Search https://tools.cisco.

    com/bugsearch/bug/CSCut46019

    Tools & Resources

    Bug Search

    Bug Search CSCut46019 Help | Feedback

    MARCH 2015 OpenSSL Vulnerabilities


    CSCut46019
    Description

    Symptom: Customer Visible


    This product includes a version of OpenSSL that is affected by the vulnerability identified by the Common Vulnerability and Exposures (CVE)
    IDs: Save Bug

    CVE-2015-0286, CVE-2015-0292, CVE-2015-0293, CVE-2015-0209, CVE-2015-0288 Open Support Case

    This bug has been opened to address the potential impact on this product.

    Conditions:
    Exposure is not configuration dependent.

    First Fixed Information:

    8.2.5.58 (April 2015)


    8.3.2.45 (April 2015)
    8.4.7.29 (April 2015)
    8.5.1.25 (April 2015)
    8.6.1.18 (April 2015)
    8.7.1.17 (April 2015)
    9.0.4.34 (April 2015)
    9.1.6.2 (24-Apr-2015)
    9.2.3.5 (April 2015)
    9.3.3.1 (8-May-2015)
    9.4.1.1 (8-May-2015)

    Published advisory is at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150320-openssl

    Workaround:
    Not available.

    More Info:
    PSIRT Evaluation:
    The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the
    time of evaluation are: 7.1/6.9

    https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:H/Au:N/C:P/I:N/A:N/E:F
    /RL:U/RC:C

    The Cisco PSIRT has assigned this score based on information obtained from multiple sources. This includes the CVSS score assigned by the
    third-party vendor when available. The CVSS score assigned may not reflect the actual impact on the Cisco Product.

    Additional information on Cisco's security vulnerability policy can be found at the following URL:

    http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

    Was the description about this Bug Helpful? (10)

    Details

    1 of 2 11/4/2015 10:19 AM
    Bug Search https://tools.cisco.com/bugsearch/bug/CSCut46019

    8.6(1) 9.1(6.99)
    Product: Cisco ASA 5500-X
    Series Next-Generation 8.7(1) 9.2(3.102)
    Firewalls 9.0 9.2(4)
    9.1(1) 9.3(3.1)
    Support Cases: 44
    9.2(1) 9.4(1.1)

    Download software for Cisco ASA


    5500-X Series Next-Generation
    Firewalls

    Community Discussion on CSCut46019 - Cisco Support Community 2 Discussion(s)

    CSCut46019- MARCH 2015 OpenSSL Vulnerabilities


    Hello� There is the following advisory: MARCH 2015 OpenSSL Vulnerabilities CSCut46019 ...

    Author: dgtejada@co.ibm.com | Posted: Aug 5, 2015 | Latest activity: Aug 5, 2015

    Identifing ASA version for MARCH 2015 OpenSSL & OpenSSL June 2015 Vulnerabilities
    Hi Team, � With reference to bug ids CSCut46019 & CSCuu83280, we found that below ...

    Author: arvind225 | Posted: Sep 2, 2015 | Latest activity: Sep 2, 2015

    Start Community Discussion

    Information For News & Alerts Support About Cisco


    Small Business Newsroom Downloads Investor Relations

    Service Provider Blogs Documentation Corporate Social Responsibility

    Executives Newsletters Communities Environmental Sustainability

    Home (Linksys) Field Notices Developer Network Tomorrow Starts Here

    Security Advisories Learning Network Career Opportunities


    Industries

    Contacts Support Community


    Technology Trends Programs
    Contact Cisco Cloud Cisco Powered

    Find a Partner IPv6 Financing Options

    Open Network Environment

    Medianet

    Virtualization Experience Infrastructure

    Contacts | Feedback | Help | Site Map | Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks

    2 of 2 11/4/2015 10:19 AM

    You might also like