CVE-2015-4000

LOW severity · CVSS 3.7 · CWE-310

3.7CVSS LOW

Summary

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

Impact & exploitability

Attack vectorNetwork

Attack complexityHigh

Privileges requiredNone

User interactionNone

Confidentiality impactNone

Integrity impactLow

Availability impactNone

Exploit probability (EPSS)92%

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products we track (8)

OpenSSL Ubuntu Debian Google Chrome Mozilla Firefox Apple Safari Oracle Java (JDK)SUSE Linux Enterprise

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

NVD record
http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.ascAdvisory
http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgeryAdvisory
http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.ascAdvisory
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402Advisory
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727Advisory
http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlAdvisory