Intrusion PreventionOpenSSL.ASN1.TYPE.cmp.DoS
Description
This indicates an attack attempt against a Denial of Service Vulnerability in OpenSSL.
The vulnerability is caused by an error when the vulnerable application handles a maliciously crafted SSL/TLS record. A remote attacker may be able to exploit this to cause a denial of service condition on affected systems.
Affected Products
OpenSSL Project OpenSSL prior to 0.9.8zf
OpenSSL Project OpenSSL prior to 1.0.0r
OpenSSL Project OpenSSL prior to 1.0.1m
OpenSSL Project OpenSSL prior to 1.0.2a
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.openssl.org/news/secadv_20150319.txt
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 40375 |
| Created | Apr 23, 2015 |
| Updated | Nov 08, 2021 |
| Risk |
|
| CVE ID | CVE-2015-0286 |
| Exploit Prediction Score | 94.83% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | Other |