Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.1e-25.el7:*:*:*:*:*:*:*

part: a version: 1.0.1e-25.el7 update: *

VendorOpenssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02)
ProductOpenssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openssl purl2cpe 2026-06-01 10:18:23.003279
pkg:deb/ubuntu/openssl purl2cpe 2026-06-01 10:18:23.003281
pkg:github/openssl/openssl purl2cpe 2026-06-01 10:18:23.003283
pkg:rpm/centos/openssl purl2cpe 2026-06-01 10:18:23.003284
pkg:rpm/fedora/openssl purl2cpe 2026-06-01 10:18:23.003285
pkg:rpm/opensuse/openssl purl2cpe 2026-06-01 10:18:23.003287

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-3216 vulnerable 2026-06-08 05:06:37.608829 Details available
Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.
Published: 2015-07-07T10:00:00.000Z
Updated: 2024-08-06T05:39:32.004Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.