RHSA-2016:1089 | Vulnetix

RHSA-2016:1089 PUBLISHED CVSS 5.099999904632568 MEDIUM

A use-after-free flaw was found in the way OpenSSL imported malformed Elliptic Curve private keys. A specially crafted key file could cause an application using OpenSSL to crash when imported.

Risk Scores

CVSS 2.0

5.099999904632568

Affected Products

Vendor	Product	Versions
Red Hat	Red Hat JBoss Web Server 3.0

Timeline

May 17, 2016 CVE Published
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Distribution Patch
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2016:1089 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1196737 issue
https://bugzilla.redhat.com/show_bug.cgi?id=1277146 issue
https://bugzilla.redhat.com/show_bug.cgi?id=1281879 issue
https://bugzilla.redhat.com/show_bug.cgi?id=1281925 issue
https://bugzilla.redhat.com/show_bug.cgi?id=1311085 issue
https://bugzilla.redhat.com/show_bug.cgi?id=1311089 issue
https://bugzilla.redhat.com/show_bug.cgi?id=1311093 issue
https://issues.redhat.com/browse/JWS-271 advisory
https://issues.redhat.com/browse/JWS-276 advisory
https://issues.redhat.com/browse/JWS-304 advisory
https://issues.redhat.com/browse/JWS-349 advisory
https://issues.redhat.com/browse/JWS-350 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1089.json advisory
https://access.redhat.com/security/cve/CVE-2015-0209 advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-0209 advisory
https://openssl.org/news/secadv_20150319.txt advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-5312 advisory
https://access.redhat.com/security/cve/CVE-2015-5345 advisory

…and 77 more

Open in Interactive Console →