CVE-2015-0204: openssl 1.0.0a, 1.0.0b, 1.0.0c (+22 more affected versions); +1 more affected products

Affected technology

openssl · through 0.9.8zc (inclusive)
openssl

openssl · 1.0.0a
openssl

openssl · 1.0.0b
openssl

openssl · 1.0.0c
openssl

openssl · 1.0.0d
openssl

openssl · 1.0.0e
openssl

openssl · 1.0.0f
openssl

openssl · 1.0.0g
openssl

openssl · 1.0.0h
openssl

openssl · 1.0.0i
openssl

openssl · 1.0.0j
openssl

openssl · 1.0.0k
openssl

openssl · 1.0.0l
openssl

openssl · 1.0.0m
openssl

openssl · 1.0.0n
openssl

openssl · 1.0.0o
openssl

openssl · 1.0.1a
openssl

openssl · 1.0.1b
openssl

openssl · 1.0.1c
openssl

openssl · 1.0.1d
openssl

openssl · 1.0.1e
openssl

openssl · 1.0.1f
openssl

openssl · 1.0.1g
openssl

openssl · 1.0.1h
openssl

openssl · 1.0.1i
openssl

openssl · 1.0.1j
openssl

n/a · n/a
Vendor not specified by the source

Description’s affected range: before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

Component: Not specified by the source
Function: in

Attack conditions (NVD, CVSS 2.0): Network (remote)

What an attacker can do

NVD’s CVSS 2.0 assessment (base score 4.3/10) rates confidentiality and availability impact as none; integrity impact as partial. The description does not specify what an attacker can achieve beyond these rated impacts.