CVE-2015-2808
First published: Mon Mar 30 2015(Updated: )
It was discovered that the Invariance Weakness of the RC4 stream cipher could be used to recover plaintext from a TLS connection, when RC4 encryption is used. "The Invariance Weakness is an L-shape key pattern in RC4 keys, which once it exists in an RC4 key, preserves part of the state permutation intact throughout the initialization process. This intact part includes the least significant bits of the permutation, when processed by the PRGA algorithm, determines the least significant bits of the allegedly pseudo-random output stream along a long prefix of the stream." This can lead to significant leakage of plaintext bytes from the ciphertext. External Reference: <a href="http://www.imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf">http://www.imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf</a>
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/java | <1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11 | 1.7.0-oracle-1:1.7.0.85-1jpp.1.el5_11 |
| redhat/java | <1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11 | 1.6.0-sun-1:1.6.0.101-1jpp.1.el5_11 |
| redhat/java | <1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6 | 1.8.0-oracle-1:1.8.0.51-1jpp.2.el6_6 |
| redhat/java | <1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6 | 1.7.0-oracle-1:1.7.0.85-1jpp.2.el6_6 |
| redhat/java | <1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6 | 1.6.0-sun-1:1.6.0.101-1jpp.1.el6_6 |
| redhat/java | <1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1 | 1.8.0-oracle-1:1.8.0.51-1jpp.2.el7_1 |
| redhat/java | <1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1 | 1.7.0-oracle-1:1.7.0.85-1jpp.2.el7_1 |
| redhat/java | <1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1 | 1.6.0-sun-1:1.6.0.101-1jpp.1.el7_1 |
| redhat/java | <1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11 | 1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el5_11 |
| redhat/java | <1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11 | 1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el5_11 |
| redhat/java | <1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el5 | 1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el5 |
| redhat/java | <1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5 | 1.7.0-ibm-1:1.7.0.9.0-1jpp.1.el5 |
| redhat/java | <1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el5 | 1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el5 |
| redhat/java | <1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6 | 1.8.0-openjdk-1:1.8.0.51-0.b16.el6_6 |
| redhat/java | <1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6 | 1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6 |
| redhat/java | <1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7 | 1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el6_7 |
| redhat/java | <1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1 | 1.8.0-openjdk-1:1.8.0.51-1.b16.el7_1 |
| redhat/java | <1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1 | 1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1 |
| redhat/java | <1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1 | 1.6.0-openjdk-1:1.6.0.36-1.13.8.1.el7_1 |
| redhat/java | <1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6 | 1.6.0-ibm-1:1.6.0.16.4-1jpp.1.el6_6 |
| redhat/java | <1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6 | 1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el6_6 |
| redhat/java | <1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6 | 1.5.0-ibm-1:1.5.0.16.10-1jpp.1.el6_6 |
| redhat/java | <1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1 | 1.7.1-ibm-1:1.7.1.3.0-1jpp.2.el7_1 |
| Oracle Communications Application Session Controller | >=3.0.0<=3.9.0 | |
| Oracle Communications Policy Management | <9.9.2 | |
| Oracle HTTP Server | =11.1.1.7.0 | |
| Oracle HTTP Server | =11.1.1.9.0 | |
| Oracle HTTP Server | =12.1.3.0.0 | |
| Oracle HTTP Server | =12.2.1.1.0 | |
| Oracle HTTP Server | =12.2.1.2.0 | |
| Oracle Integrated Lights Out Manager Firmware | >=3.0.0<=3.2.11 | |
| Oracle Integrated Lights Out Manager Firmware | >=4.0.0<=4.0.4 | |
| Debian Debian Linux | =7.0 | |
| Debian Debian Linux | =8.0 | |
| Redhat Satellite | =5.7 | |
| Redhat Enterprise Linux Desktop | =5.0 | |
| Redhat Enterprise Linux Desktop | =6.0 | |
| Redhat Enterprise Linux Desktop | =7.0 | |
| Redhat Enterprise Linux Eus | =6.6 | |
| Redhat Enterprise Linux Eus | =7.1 | |
| Redhat Enterprise Linux Eus | =7.2 | |
| Redhat Enterprise Linux Eus | =7.3 | |
| Redhat Enterprise Linux Eus | =7.4 | |
| Redhat Enterprise Linux Eus | =7.5 | |
| Redhat Enterprise Linux Eus | =7.6 | |
| Redhat Enterprise Linux Eus | =7.7 | |
| Redhat Enterprise Linux Server | =5.0 | |
| Redhat Enterprise Linux Server | =6.0 | |
| Redhat Enterprise Linux Server | =7.0 | |
| Redhat Enterprise Linux Server Aus | =6.6 | |
| Redhat Enterprise Linux Server Aus | =7.3 | |
| Redhat Enterprise Linux Server Aus | =7.4 | |
| Redhat Enterprise Linux Server Aus | =7.6 | |
| Redhat Enterprise Linux Server Aus | =7.7 | |
| Redhat Enterprise Linux Server Tus | =7.3 | |
| Redhat Enterprise Linux Server Tus | =7.6 | |
| Redhat Enterprise Linux Server Tus | =7.7 | |
| Redhat Enterprise Linux Workstation | =5.0 | |
| Redhat Enterprise Linux Workstation | =6.0 | |
| Redhat Enterprise Linux Workstation | =7.0 | |
| SUSE Linux Enterprise Debuginfo | =11-sp3 | |
| SUSE Linux Enterprise Debuginfo | =11-sp4 | |
| openSUSE openSUSE | =13.1 | |
| openSUSE openSUSE | =13.2 | |
| SUSE Linux Enterprise Desktop | =11-sp3 | |
| SUSE Linux Enterprise Desktop | =11-sp4 | |
| SUSE Linux Enterprise Desktop | =12 | |
| SUSE Linux Enterprise Server | =10-sp4 | |
| SUSE Linux Enterprise Server | =11-sp1 | |
| SUSE Linux Enterprise Server | =11-sp2 | |
| Suse Linux Enterprise Server | =11-sp3 | |
| SUSE Linux Enterprise Server | =12 | |
| SUSE Linux Enterprise Software Development Kit | =11-sp3 | |
| SUSE Linux Enterprise Software Development Kit | =12 | |
| SUSE Manager | =1.7 | |
| SUSE Linux Enterprise Server | =11-sp2 | |
| Canonical Ubuntu Linux | =12.04 | |
| Canonical Ubuntu Linux | =14.04 | |
| Canonical Ubuntu Linux | =15.04 | |
| Redhat Satellite | =5.6 | |
| Redhat Enterprise Linux | =5.0 | |
| Redhat Enterprise Linux | =6.0 | |
| Fujitsu Sparc Enterprise M3000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M3000 | ||
| Fujitsu Sparc Enterprise M4000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M4000 | ||
| Fujitsu Sparc Enterprise M5000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M5000 | ||
| Fujitsu Sparc Enterprise M8000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M8000 | ||
| Fujitsu Sparc Enterprise M9000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M9000 | ||
| Huawei E6000 Firmware | ||
| Huawei E6000 | ||
| Huawei E9000 Firmware | ||
| Huawei E9000 | ||
| Huawei Oceanstor 18500 Firmware | ||
| Huawei Oceanstor 18500 | ||
| Huawei Oceanstor 18800 Firmware | ||
| Huawei Oceanstor 18800 | ||
| Huawei Oceanstor 18800f Firmware | ||
| Huawei Oceanstor 18800f | ||
| Huawei Oceanstor 9000 Firmware | ||
| Huawei Oceanstor 9000 | ||
| Huawei Oceanstor Cse Firmware | ||
| Huawei Oceanstor Cse | ||
| Huawei Oceanstor Hvs85t Firmware | ||
| Huawei Oceanstor Hvs85t | ||
| Huawei Oceanstor S2600t Firmware | ||
| Huawei Oceanstor S2600t | ||
| Huawei Oceanstor S5500t Firmware | ||
| Huawei Oceanstor S5500t | ||
| Huawei Oceanstor S5600t Firmware | ||
| Huawei Oceanstor S5600t | ||
| Huawei Oceanstor S5800t Firmware | ||
| Huawei Oceanstor S5800t | ||
| Huawei Oceanstor S6800t Firmware | ||
| Huawei Oceanstor S6800t | ||
| Huawei Oceanstor Vis6600t Firmware | ||
| Huawei Oceanstor Vis6600t | ||
| Huawei Quidway S9300 Firmware | ||
| Huawei Quidway S9300 | ||
| Huawei S7700 Firmware | ||
| Huawei S7700 | ||
| Huawei 9700 Firmware | ||
| Huawei 9700 | ||
| Huawei S12700 Firmware | ||
| Huawei S12700 | ||
| Huawei S2700 Firmware | ||
| Huawei S2700 | ||
| Huawei S3700 Firmware | ||
| Huawei S3700 | ||
| Huawei S5700ei Firmware | ||
| Huawei S5700ei | ||
| Huawei S5700hi Firmware | ||
| Huawei S5700hi | ||
| Huawei S5700si Firmware | ||
| Huawei S5700si | ||
| Huawei S5710ei Firmware | ||
| Huawei S5710ei | ||
| Huawei S5710hi Firmware | ||
| Huawei S5710hi | ||
| Huawei S6700 Firmware | ||
| Huawei S6700 | ||
| Huawei S2750 Firmware | ||
| Huawei S2750 | ||
| Huawei S5700li Firmware | ||
| Huawei S5700li | ||
| Huawei S5700s-li Firmware | ||
| Huawei S5700s-li | ||
| Huawei S5720hi Firmware | ||
| Huawei S5720hi | ||
| Huawei S5720ei Firmware | ||
| Huawei S5720ei | ||
| Huawei Te60 Firmware | ||
| Huawei TE60 | ||
| Huawei Oceanstor Replicationdirector | =v100r003c00 | |
| Huawei Policy Center | =v100r003c00 | |
| Huawei Policy Center | =v100r003c10 | |
| Huawei SMC2.0 | =v100r002c01 | |
| Huawei SMC2.0 | =v100r002c02 | |
| Huawei SMC2.0 | =v100r002c03 | |
| Huawei SMC2.0 | =v100r002c04 | |
| Huawei Ultravr | =v100r003c00 | |
| Ibm Cognos Metrics Manager | =10.1 | |
| Ibm Cognos Metrics Manager | =10.1.1 | |
| Ibm Cognos Metrics Manager | =10.2 | |
| Ibm Cognos Metrics Manager | =10.2.1 | |
| Ibm Cognos Metrics Manager | =10.2.2 | |
| All of | ||
| SUSE Manager | =1.7 | |
| SUSE Linux Enterprise Server | =11-sp2 | |
| All of | ||
| Redhat Satellite | =5.6 | |
| Any of | ||
| Redhat Enterprise Linux | =5.0 | |
| Redhat Enterprise Linux | =6.0 | |
| All of | ||
| Fujitsu Sparc Enterprise M3000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M3000 | ||
| All of | ||
| Fujitsu Sparc Enterprise M4000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M4000 | ||
| All of | ||
| Fujitsu Sparc Enterprise M5000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M5000 | ||
| All of | ||
| Fujitsu Sparc Enterprise M8000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M8000 | ||
| All of | ||
| Fujitsu Sparc Enterprise M9000 Firmware | >=xcp<xcp_1121 | |
| Fujitsu Sparc Enterprise M9000 | ||
| All of | ||
| Huawei E6000 Firmware | ||
| Huawei E6000 | ||
| All of | ||
| Huawei E9000 Firmware | ||
| Huawei E9000 | ||
| All of | ||
| Huawei Oceanstor 18500 Firmware | ||
| Huawei Oceanstor 18500 | ||
| All of | ||
| Huawei Oceanstor 18800 Firmware | ||
| Huawei Oceanstor 18800 | ||
| All of | ||
| Huawei Oceanstor 18800f Firmware | ||
| Huawei Oceanstor 18800f | ||
| All of | ||
| Huawei Oceanstor 9000 Firmware | ||
| Huawei Oceanstor 9000 | ||
| All of | ||
| Huawei Oceanstor Cse Firmware | ||
| Huawei Oceanstor Cse | ||
| All of | ||
| Huawei Oceanstor Hvs85t Firmware | ||
| Huawei Oceanstor Hvs85t | ||
| All of | ||
| Huawei Oceanstor S2600t Firmware | ||
| Huawei Oceanstor S2600t | ||
| All of | ||
| Huawei Oceanstor S5500t Firmware | ||
| Huawei Oceanstor S5500t | ||
| All of | ||
| Huawei Oceanstor S5600t Firmware | ||
| Huawei Oceanstor S5600t | ||
| All of | ||
| Huawei Oceanstor S5800t Firmware | ||
| Huawei Oceanstor S5800t | ||
| All of | ||
| Huawei Oceanstor S6800t Firmware | ||
| Huawei Oceanstor S6800t | ||
| All of | ||
| Huawei Oceanstor Vis6600t Firmware | ||
| Huawei Oceanstor Vis6600t | ||
| All of | ||
| Huawei Quidway S9300 Firmware | ||
| Huawei Quidway S9300 | ||
| All of | ||
| Huawei S7700 Firmware | ||
| Huawei S7700 | ||
| All of | ||
| Huawei 9700 Firmware | ||
| Huawei 9700 | ||
| All of | ||
| Huawei S12700 Firmware | ||
| Huawei S12700 | ||
| All of | ||
| Huawei S2700 Firmware | ||
| Huawei S2700 | ||
| All of | ||
| Huawei S3700 Firmware | ||
| Huawei S3700 | ||
| All of | ||
| Huawei S5700ei Firmware | ||
| Huawei S5700ei | ||
| All of | ||
| Huawei S5700hi Firmware | ||
| Huawei S5700hi | ||
| All of | ||
| Huawei S5700si Firmware | ||
| Huawei S5700si | ||
| All of | ||
| Huawei S5710ei Firmware | ||
| Huawei S5710ei | ||
| All of | ||
| Huawei S5710hi Firmware | ||
| Huawei S5710hi | ||
| All of | ||
| Huawei S6700 Firmware | ||
| Huawei S6700 | ||
| All of | ||
| Huawei S2750 Firmware | ||
| Huawei S2750 | ||
| All of | ||
| Huawei S5700li Firmware | ||
| Huawei S5700li | ||
| All of | ||
| Huawei S5700s-li Firmware | ||
| Huawei S5700s-li | ||
| All of | ||
| Huawei S5720hi Firmware | ||
| Huawei S5720hi | ||
| All of | ||
| Huawei S5720ei Firmware | ||
| Huawei S5720ei | ||
| All of | ||
| Huawei Te60 Firmware | ||
| Huawei TE60 | ||
| debian/openjdk-8 | 8u432-b06-2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.cve.org/CVERecord?id=CVE-2015-2808 https://nvd.nist.gov/vuln/detail/CVE-2015-2808 http://www.imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf
- https://bugzilla.redhat.com/show_bug.cgi?id=1207101
- https://access.redhat.com/errata/RHSA-2015:1242
- https://access.redhat.com/errata/RHSA-2015:1243
- https://access.redhat.com/errata/RHSA-2015:1241
- https://access.redhat.com/errata/RHSA-2015:1230
- https://access.redhat.com/errata/RHSA-2015:1526
- https://access.redhat.com/errata/RHSA-2015:1006
- https://access.redhat.com/errata/RHSA-2015:1007
- https://access.redhat.com/errata/RHSA-2015:1021
- https://access.redhat.com/errata/RHSA-2015:1228
- https://access.redhat.com/errata/RHSA-2015:1229
- https://access.redhat.com/errata/RHSA-2015:1091
- https://access.redhat.com/errata/RHSA-2015:1020
- https://access.redhat.com/security/cve/CVE-2015-2808
- https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf
- http://www-01.ibm.com/support/docview.wss?uid=swg21883640
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.huawei.com/en/psirt/security-advisories/hw-454055
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.securityfocus.com/bid/91787
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888
- http://www.securitytracker.com/id/1032599
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm
- https://security.gentoo.org/glsa/201512-10
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
- http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034
- https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246
- http://www.securitytracker.com/id/1033737
- http://www.securitytracker.com/id/1033769
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256
- http://www.securitytracker.com/id/1033386
- http://www.securitytracker.com/id/1033415
- http://www.securitytracker.com/id/1033431
- http://www.securitytracker.com/id/1033432
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241
- http://www.debian.org/security/2015/dsa-3339
- http://rhn.redhat.com/errata/RHSA-2015-1526.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html
- http://www.ubuntu.com/usn/USN-2696-1
- http://www.ubuntu.com/usn/USN-2706-1
- http://www-304.ibm.com/support/docview.wss?uid=swg21903565
- http://www-304.ibm.com/support/docview.wss?uid=swg21960015
- http://www-304.ibm.com/support/docview.wss?uid=swg21960769
- http://rhn.redhat.com/errata/RHSA-2015-1006.html
- http://rhn.redhat.com/errata/RHSA-2015-1007.html
- http://rhn.redhat.com/errata/RHSA-2015-1020.html
- http://rhn.redhat.com/errata/RHSA-2015-1021.html
- http://rhn.redhat.com/errata/RHSA-2015-1091.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html
- http://www.securitytracker.com/id/1032707
- http://www.securitytracker.com/id/1032708
- http://www.securitytracker.com/id/1032734
- http://www.securitytracker.com/id/1032788
- http://www.securitytracker.com/id/1032858
- http://www.securitytracker.com/id/1032868
- http://www.securityfocus.com/bid/73684
- https://kb.juniper.net/JSA10783
- https://kc.mcafee.com/corporate/index?page=content&id=SB10163
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://marc.info/?l=bugtraq&m=143818140118771&w=2
- http://marc.info/?l=bugtraq&m=143817899717054&w=2
- http://marc.info/?l=bugtraq&m=143817021313142&w=2
- http://marc.info/?l=bugtraq&m=143741441012338&w=2
- http://marc.info/?l=bugtraq&m=143456209711959&w=2
- http://marc.info/?l=bugtraq&m=143629696317098&w=2
- http://marc.info/?l=bugtraq&m=144060576831314&w=2
- http://marc.info/?l=bugtraq&m=144069189622016&w=2
- http://marc.info/?l=bugtraq&m=144104565600964&w=2
- http://marc.info/?l=bugtraq&m=144060606031437&w=2
- http://marc.info/?l=bugtraq&m=144102017024820&w=2
- http://marc.info/?l=bugtraq&m=144059660127919&w=2
- http://marc.info/?l=bugtraq&m=144059703728085&w=2
- http://marc.info/?l=bugtraq&m=144043644216842&w=2
- http://marc.info/?l=bugtraq&m=144104533800819&w=2
- http://marc.info/?l=bugtraq&m=144493176821532&w=2
- http://www.securitytracker.com/id/1036222
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380
- http://www.securitytracker.com/id/1033071
- http://www.securitytracker.com/id/1033072
- http://www.securitytracker.com/id/1032910
- http://www.securitytracker.com/id/1032990
- http://www.securitytracker.com/id/1032600
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.debian.org/security/2015/dsa-3316
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922
- http://rhn.redhat.com/errata/RHSA-2015-1228.html
- http://rhn.redhat.com/errata/RHSA-2015-1229.html
- http://rhn.redhat.com/errata/RHSA-2015-1230.html
- http://rhn.redhat.com/errata/RHSA-2015-1241.html
- http://rhn.redhat.com/errata/RHSA-2015-1242.html
- http://rhn.redhat.com/errata/RHSA-2015-1243.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/
- https://launchpad.net/bugs/cve/CVE-2015-2808
- http://www.imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
- http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_June_2015
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1152789#c82
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1207101#c4
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/6a24fc5e32a3
- https://rhn.redhat.com/errata/RHSA-2015-1007.html
- https://rhn.redhat.com/errata/RHSA-2015-1006.html
- https://rhn.redhat.com/errata/RHSA-2015-1021.html
- https://rhn.redhat.com/errata/RHSA-2015-1020.html
- https://rhn.redhat.com/errata/RHSA-2015-1091.html
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA
- http://www.oracle.com/technetwork/java/javase/8u51-relnotes-2587590.html
- http://www.oracle.com/technetwork/java/javase/7u85-relnotes-2587591.html
- http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1207101#c5
- https://tools.ietf.org/html/rfc7465
- https://rhn.redhat.com/errata/RHSA-2015-1230.html
- https://rhn.redhat.com/errata/RHSA-2015-1229.html
- https://rhn.redhat.com/errata/RHSA-2015-1228.html
- https://rhn.redhat.com/errata/RHSA-2015-1243.html
- https://rhn.redhat.com/errata/RHSA-2015-1242.html
- https://rhn.redhat.com/errata/RHSA-2015-1241.html
- https://rhn.redhat.com/errata/RHSA-2015-1526.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1207101#c11
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/9890d5500183
- http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/cc75137936f9
- http://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_101
- http://www.oracle.com/technetwork/java/javase/documentation/overview-156328.html#R160_115
- https://bugs.openjdk.java.net/browse/JDK-8141050
- https://bugzilla.redhat.com/show_bug.cgi?id=1207101#c4
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727
- http://marc.info/?l=bugtraq&m=143456209711959&w=2
- http://marc.info/?l=bugtraq&m=143629696317098&w=2
- http://marc.info/?l=bugtraq&m=143741441012338&w=2
- http://marc.info/?l=bugtraq&m=143817021313142&w=2
- http://marc.info/?l=bugtraq&m=143817899717054&w=2
- http://marc.info/?l=bugtraq&m=143818140118771&w=2
- http://marc.info/?l=bugtraq&m=144043644216842&w=2
- http://marc.info/?l=bugtraq&m=144059660127919&w=2
- http://marc.info/?l=bugtraq&m=144059703728085&w=2
- http://marc.info/?l=bugtraq&m=144060576831314&w=2
- http://marc.info/?l=bugtraq&m=144060606031437&w=2
- http://marc.info/?l=bugtraq&m=144069189622016&w=2
- http://marc.info/?l=bugtraq&m=144102017024820&w=2
- http://marc.info/?l=bugtraq&m=144104533800819&w=2
- http://marc.info/?l=bugtraq&m=144104565600964&w=2
- http://marc.info/?l=bugtraq&m=144493176821532&w=2
- https://kc.mcafee.com/corporate/index?page=content&id=SB10163
- https://security-tracker.debian.org/tracker/CVE-2015-2808
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808
- https://nvd.nist.gov/vuln/detail/CVE-2015-2808
- https://ubuntu.com/security/CVE-2015-2808
Parent vulnerabilities
(Appears in the following advisories)
- collector/redhat-cve
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-2808
- agent/remedy
- agent/weakness
- agent/severity
- agent/author
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/tags
- agent/description
- agent/event
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- agent/last-modified-date
- agent/trending
- package-manager/redhat
- vendor/oracle
- canonical/oracle communications application session controller
- version/oracle communications application session controller/3.0.0
- version/oracle communications application session controller/3.9.0
- canonical/oracle communications policy management
- canonical/oracle http server
- version/oracle http server/11.1.1.7.0
- version/oracle http server/11.1.1.9.0
- version/oracle http server/12.1.3.0.0
- version/oracle http server/12.2.1.1.0
- version/oracle http server/12.2.1.2.0
- canonical/oracle integrated lights out manager firmware
- version/oracle integrated lights out manager firmware/3.0.0
- version/oracle integrated lights out manager firmware/3.2.11
- version/oracle integrated lights out manager firmware/4.0.0
- version/oracle integrated lights out manager firmware/4.0.4
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/7.0
- version/debian debian linux/8.0
- vendor/redhat
- canonical/redhat satellite
- version/redhat satellite/5.7
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/5.0
- version/redhat enterprise linux desktop/6.0
- version/redhat enterprise linux desktop/7.0
- canonical/redhat enterprise linux eus
- version/redhat enterprise linux eus/6.6
- version/redhat enterprise linux eus/7.1
- version/redhat enterprise linux eus/7.2
- version/redhat enterprise linux eus/7.3
- version/redhat enterprise linux eus/7.4
- version/redhat enterprise linux eus/7.5
- version/redhat enterprise linux eus/7.6
- version/redhat enterprise linux eus/7.7
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/5.0
- version/redhat enterprise linux server/6.0
- version/redhat enterprise linux server/7.0
- canonical/redhat enterprise linux server aus
- version/redhat enterprise linux server aus/6.6
- version/redhat enterprise linux server aus/7.3
- version/redhat enterprise linux server aus/7.4
- version/redhat enterprise linux server aus/7.6
- version/redhat enterprise linux server aus/7.7
- canonical/redhat enterprise linux server tus
- version/redhat enterprise linux server tus/7.3
- version/redhat enterprise linux server tus/7.6
- version/redhat enterprise linux server tus/7.7
- canonical/redhat enterprise linux workstation
- version/redhat enterprise linux workstation/5.0
- version/redhat enterprise linux workstation/6.0
- version/redhat enterprise linux workstation/7.0
- vendor/suse
- canonical/suse linux enterprise debuginfo
- version/suse linux enterprise debuginfo/11-sp3
- version/suse linux enterprise debuginfo/11-sp4
- vendor/opensuse
- canonical/opensuse opensuse
- version/opensuse opensuse/13.1
- version/opensuse opensuse/13.2
- canonical/suse linux enterprise desktop
- version/suse linux enterprise desktop/11-sp3
- version/suse linux enterprise desktop/11-sp4
- version/suse linux enterprise desktop/12
- canonical/suse linux enterprise server
- version/suse linux enterprise server/10-sp4
- version/suse linux enterprise server/11-sp1
- version/suse linux enterprise server/11-sp2
- version/suse linux enterprise server/11-sp3
- version/suse linux enterprise server/12
- canonical/suse linux enterprise software development kit
- version/suse linux enterprise software development kit/11-sp3
- version/suse linux enterprise software development kit/12
- canonical/suse manager
- version/suse manager/1.7
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/12.04
- version/canonical ubuntu linux/14.04
- version/canonical ubuntu linux/15.04
- version/redhat satellite/5.6
- canonical/redhat enterprise linux
- version/redhat enterprise linux/5.0
- version/redhat enterprise linux/6.0
- vendor/fujitsu
- canonical/fujitsu sparc enterprise m3000 firmware
- version/fujitsu sparc enterprise m3000 firmware/xcp
- canonical/fujitsu sparc enterprise m3000
- canonical/fujitsu sparc enterprise m4000 firmware
- version/fujitsu sparc enterprise m4000 firmware/xcp
- canonical/fujitsu sparc enterprise m4000
- canonical/fujitsu sparc enterprise m5000 firmware
- version/fujitsu sparc enterprise m5000 firmware/xcp
- canonical/fujitsu sparc enterprise m5000
- canonical/fujitsu sparc enterprise m8000 firmware
- version/fujitsu sparc enterprise m8000 firmware/xcp
- canonical/fujitsu sparc enterprise m8000
- canonical/fujitsu sparc enterprise m9000 firmware
- version/fujitsu sparc enterprise m9000 firmware/xcp
- canonical/fujitsu sparc enterprise m9000
- vendor/huawei
- canonical/huawei e6000 firmware
- canonical/huawei e6000
- canonical/huawei e9000 firmware
- canonical/huawei e9000
- canonical/huawei oceanstor 18500 firmware
- canonical/huawei oceanstor 18500
- canonical/huawei oceanstor 18800 firmware
- canonical/huawei oceanstor 18800
- canonical/huawei oceanstor 18800f firmware
- canonical/huawei oceanstor 18800f
- canonical/huawei oceanstor 9000 firmware
- canonical/huawei oceanstor 9000
- canonical/huawei oceanstor cse firmware
- canonical/huawei oceanstor cse
- canonical/huawei oceanstor hvs85t firmware
- canonical/huawei oceanstor hvs85t
- canonical/huawei oceanstor s2600t firmware
- canonical/huawei oceanstor s2600t
- canonical/huawei oceanstor s5500t firmware
- canonical/huawei oceanstor s5500t
- canonical/huawei oceanstor s5600t firmware
- canonical/huawei oceanstor s5600t
- canonical/huawei oceanstor s5800t firmware
- canonical/huawei oceanstor s5800t
- canonical/huawei oceanstor s6800t firmware
- canonical/huawei oceanstor s6800t
- canonical/huawei oceanstor vis6600t firmware
- canonical/huawei oceanstor vis6600t
- canonical/huawei quidway s9300 firmware
- canonical/huawei quidway s9300
- canonical/huawei s7700 firmware
- canonical/huawei s7700
- canonical/huawei 9700 firmware
- canonical/huawei 9700
- canonical/huawei s12700 firmware
- canonical/huawei s12700
- canonical/huawei s2700 firmware
- canonical/huawei s2700
- canonical/huawei s3700 firmware
- canonical/huawei s3700
- canonical/huawei s5700ei firmware
- canonical/huawei s5700ei
- canonical/huawei s5700hi firmware
- canonical/huawei s5700hi
- canonical/huawei s5700si firmware
- canonical/huawei s5700si
- canonical/huawei s5710ei firmware
- canonical/huawei s5710ei
- canonical/huawei s5710hi firmware
- canonical/huawei s5710hi
- canonical/huawei s6700 firmware
- canonical/huawei s6700
- canonical/huawei s2750 firmware
- canonical/huawei s2750
- canonical/huawei s5700li firmware
- canonical/huawei s5700li
- canonical/huawei s5700s-li firmware
- canonical/huawei s5700s-li
- canonical/huawei s5720hi firmware
- canonical/huawei s5720hi
- canonical/huawei s5720ei firmware
- canonical/huawei s5720ei
- canonical/huawei te60 firmware
- canonical/huawei te60
- canonical/huawei oceanstor replicationdirector
- version/huawei oceanstor replicationdirector/v100r003c00
- canonical/huawei policy center
- version/huawei policy center/v100r003c00
- version/huawei policy center/v100r003c10
- canonical/huawei smc2.0
- version/huawei smc2.0/v100r002c01
- version/huawei smc2.0/v100r002c02
- version/huawei smc2.0/v100r002c03
- version/huawei smc2.0/v100r002c04
- canonical/huawei ultravr
- version/huawei ultravr/v100r003c00
- vendor/ibm
- canonical/ibm cognos metrics manager
- version/ibm cognos metrics manager/10.1
- version/ibm cognos metrics manager/10.1.1
- version/ibm cognos metrics manager/10.2
- version/ibm cognos metrics manager/10.2.1
- version/ibm cognos metrics manager/10.2.2
- package-manager/debian