CVE-2015-2808
LOW severity · CVSS 3.7 · CWE-327
3.7CVSS LOW
Summary
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
Impact & exploitability
Attack vectorNetwork
Attack complexityHigh
Privileges requiredNone
User interactionNone
Confidentiality impactLow
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)74%
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products we track (2)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.htmlAdvisory