CVE-2015-2808

Fixed in a distro release EPSS 74%CVSS 3.7

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Published 2015-04-01 · CVE record · OSV

Products: oracle communications_application_session_controller, oracle communications_policy_management, oracle http_server, oracle integrated_lights_out_manager_firmware, debian_linux, redhat satellite, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, suse linux_enterprise_debuginfo, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse manager, canonical ubuntu_linux, fujitsu sparc_enterprise_m3000_firmware, fujitsu sparc_enterprise_m4000_firmware, fujitsu sparc_enterprise_m5000_firmware, fujitsu sparc_enterprise_m8000_firmware, fujitsu sparc_enterprise_m9000_firmware, huawei e6000_firmware, huawei e9000_firmware, huawei oceanstor_18500_firmware, huawei oceanstor_18800_firmware, huawei oceanstor_18800f_firmware, huawei oceanstor_9000_firmware, huawei oceanstor_cse_firmware, huawei oceanstor_hvs85t_firmware, huawei oceanstor_s2600t_firmware, huawei oceanstor_s5500t_firmware, huawei oceanstor_s5600t_firmware, huawei oceanstor_s5800t_firmware, huawei oceanstor_s6800t_firmware, huawei oceanstor_vis6600t_firmware, huawei quidway_s9300_firmware, huawei s7700_firmware, huawei 9700_firmware, huawei s12700_firmware, huawei s2700_firmware, huawei s3700_firmware, huawei s5700ei_firmware, huawei s5700hi_firmware, huawei s5700si_firmware, huawei s5710ei_firmware, huawei s5710hi_firmware, huawei s6700_firmware, huawei s2750_firmware, huawei s5700li_firmware, huawei s5700s-li_firmware, huawei s5720hi_firmware, huawei s5720ei_firmware, huawei te60_firmware, huawei oceanstor_replicationdirector, huawei policy_center, huawei smc2.0, huawei ultravr, ibm cognos_metrics_manager

Distro releases