Bug Search https://tools.cisco.

com/bugsearch/bug/CSCut46019

Tools & Resources

Bug Search

Bug Search CSCut46019 Help | Feedback

MARCH 2015 OpenSSL Vulnerabilities

CSCut46019
Description

Symptom: Customer Visible

This product includes a version of OpenSSL that is affected by the vulnerability identified by the Common Vulnerability and Exposures (CVE)
IDs: Save Bug

CVE-2015-0286, CVE-2015-0292, CVE-2015-0293, CVE-2015-0209, CVE-2015-0288 Open Support Case

This bug has been opened to address the potential impact on this product.

Conditions:
Exposure is not configuration dependent.

First Fixed Information:

8.2.5.58 (April 2015)

8.3.2.45 (April 2015)
8.4.7.29 (April 2015)
8.5.1.25 (April 2015)
8.6.1.18 (April 2015)
8.7.1.17 (April 2015)
9.0.4.34 (April 2015)
9.1.6.2 (24-Apr-2015)
9.2.3.5 (April 2015)
9.3.3.1 (8-May-2015)
9.4.1.1 (8-May-2015)

Published advisory is at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150320-openssl

Workaround:
Not available.

More Info:
PSIRT Evaluation:
The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The Base and Temporal CVSS scores as of the
time of evaluation are: 7.1/6.9

https://intellishield.cisco.com/security/alertmanager/cvssCalculator.do?dispatch=1&version=2&vector=AV:N/AC:H/Au:N/C:P/I:N/A:N/E:F
/RL:U/RC:C

The Cisco PSIRT has assigned this score based on information obtained from multiple sources. This includes the CVSS score assigned by the
third-party vendor when available. The CVSS score assigned may not reflect the actual impact on the Cisco Product.

Additional information on Cisco's security vulnerability policy can be found at the following URL:

http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

Was the description about this Bug Helpful? (10)

Details

1 of 2 11/4/2015 10:19 AM
Bug Search https://tools.cisco.com/bugsearch/bug/CSCut46019

8.6(1) 9.1(6.99)
Product: Cisco ASA 5500-X
Series Next-Generation 8.7(1) 9.2(3.102)
Firewalls 9.0 9.2(4)
9.1(1) 9.3(3.1)
Support Cases: 44
9.2(1) 9.4(1.1)

Download software for Cisco ASA

5500-X Series Next-Generation
Firewalls

Community Discussion on CSCut46019 - Cisco Support Community 2 Discussion(s)

CSCut46019- MARCH 2015 OpenSSL Vulnerabilities

Hello� There is the following advisory: MARCH 2015 OpenSSL Vulnerabilities CSCut46019 ...

Author: dgtejada@co.ibm.com | Posted: Aug 5, 2015 | Latest activity: Aug 5, 2015

Identifing ASA version for MARCH 2015 OpenSSL & OpenSSL June 2015 Vulnerabilities
Hi Team, � With reference to bug ids CSCut46019 & CSCuu83280, we found that below ...

Author: arvind225 | Posted: Sep 2, 2015 | Latest activity: Sep 2, 2015

Start Community Discussion

Information For News & Alerts Support About Cisco

Small Business Newsroom Downloads Investor Relations

Service Provider Blogs Documentation Corporate Social Responsibility

Executives Newsletters Communities Environmental Sustainability

Home (Linksys) Field Notices Developer Network Tomorrow Starts Here

Security Advisories Learning Network Career Opportunities

Industries

Contacts Support Community

Technology Trends Programs
Contact Cisco Cloud Cisco Powered

Find a Partner IPv6 Financing Options

Open Network Environment

Medianet

Virtualization Experience Infrastructure

Contacts | Feedback | Help | Site Map | Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks

2 of 2 11/4/2015 10:19 AM