Fluid Attacks Database

Description

A regression was found in the ssleay_rand_bytes() function in the versions of OpenSSL shipped with Red Hat Enterprise Linux 6 and 7. This regression could cause a multi-threaded application to crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel6	openssl	<0:1.0.1e-30.el6_6.11	0:1.0.1e-30.el6_6.11
rpm rhel7	openssl	<1:1.0.1e-42.el7_1.8	1:1.0.1e-42.el7_1.8

Aliases

1. CVE-2015-32162. NVD-2015-32163. OSV-2015-3216

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.