Security Advisory

CVE-2015-5887

10

Vulnerability Description

The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data.
Published Date October 9, 2015
Official Source NIST NVD Advisory