CVE-2015-4000 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to co...
LowCVSS 3.7
EPSS 99.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nss(Debian:12) | < 2:3.19.1-1 | 2:3.19.1-1 |
| debian/nss(Debian:13) | < 2:3.19.1-1 | 2:3.19.1-1 |
| debian/nss(Debian:14) | < 2:3.19.1-1 | 2:3.19.1-1 |
| debian/openssl(Debian:12) | < 1.0.2b-1 | 1.0.2b-1 |
| debian/openssl(Debian:13) | < 1.0.2b-1 | 1.0.2b-1 |
| debian/openssl(Debian:14) | < 1.0.2b-1 | 1.0.2b-1 |
| OpenSSL | >= 1.0.1, <= 1.0.1m | No fix listed |
| OpenSSL | >= 1.0.2, <= 1.0.2a | No fix listed |
| OpenSSL | <= 1.0.1m | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| HP Inc hp-ux | = b.11.31 | No fix listed |
| ibm content manager | = 8.5 | No fix listed |
| oracle jrockit | = r28.3.6 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| oracle jdk | = 1.6.0-update95 | No fix listed |
| oracle jdk | = 1.7.0-update75 | No fix listed |
| oracle jdk | = 1.7.0-update80 | No fix listed |
| oracle jdk | = 1.8.0-update_33 | No fix listed |
| oracle jdk | = 1.8.0-update45 | No fix listed |
| oracle jre | = 1.6.0-update_95 | No fix listed |
| oracle jre | = 1.7.0-update_75 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jre | = 1.7.0-update_80 | No fix listed |
| oracle jre | = 1.8.0-update_33 | No fix listed |
| oracle jre | = 1.8.0-update_45 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise server | = 11.0-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| suse linux enterprise server | = 12 | No fix listed |
| apple iphone os | <= 8.3 | No fix listed |
| apple mac os x | <= 10.10.3 | No fix listed |
| mozilla network security services | = 3.19 | No fix listed |
| oracle sparc-opl service processor | <= 1121 | No fix listed |
| apple Safari | All versions | No fix listed |
| Google Chrome | All versions | No fix listed |
| Microsoft internet explorer | All versions | No fix listed |
| mozilla Firefox | All versions | No fix listed |
| mozilla Firefox | = 38.1.0 | No fix listed |
| mozilla Firefox | = 39.0 | No fix listed |
| opera browser | All versions | No fix listed |
| mozilla firefox esr | = 31.8 | No fix listed |
| mozilla seamonkey | = 2.35 | No fix listed |
| mozilla Thunderbird | = 31.8 | No fix listed |
| mozilla Thunderbird | = 38.1 | No fix listed |
| mozilla firefox os | = 2.2 | No fix listed |
References
- Debian Security Tracker CVE-2015-4000 vendor-advisory
- aix.software.ibm.com third-party-advisory
- fortiguard.com third-party-advisory
- NetBSD-SA2015-008 mailing-list third-party-advisory vendor-advisory
- h20564.www2.hpe.com third-party-advisory
- h20564.www2.hpe.com third-party-advisory
- kb.juniper.net third-party-advisory
- kb.juniper.net third-party-advisory
- APPLE-SA-2015-06-30-1 mailing-list third-party-advisory vendor-advisory
- APPLE-SA-2015-06-30-2 mailing-list third-party-advisory vendor-advisory
- FEDORA-2015-9130 mailing-list third-party-advisory vendor-advisory
- FEDORA-2015-9048 mailing-list third-party-advisory vendor-advisory
- FEDORA-2015-9161 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1139 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1143 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1150 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1177 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1181 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1182 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1183 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1184 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1185 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1229 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1266 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1268 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1269 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1277 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1288 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1289 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1319 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1320 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1449 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1581 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2015:1663 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0224 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0226 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0255 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0261 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0262 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1209 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2015:1684 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0478 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0483 mailing-list third-party-advisory vendor-advisory
- HPSBMU03356 mailing-list third-party-advisory vendor-advisory
- HPSBGN03351 mailing-list third-party-advisory vendor-advisory
- HPSBGN03362 mailing-list third-party-advisory vendor-advisory
- HPSBGN03361 mailing-list third-party-advisory vendor-advisory
- HPSBUX03363 mailing-list third-party-advisory vendor-advisory
- HPSBGN03373 mailing-list third-party-advisory vendor-advisory
- SSRT102180 mailing-list third-party-advisory vendor-advisory
- HPSBMU03345 mailing-list third-party-advisory vendor-advisory
- HPSBGN03404 mailing-list third-party-advisory vendor-advisory
- HPSBGN03399 mailing-list third-party-advisory vendor-advisory
- HPSBGN03405 mailing-list third-party-advisory vendor-advisory
- HPSBGN03411 mailing-list third-party-advisory vendor-advisory
- HPSBGN03402 mailing-list third-party-advisory vendor-advisory
- HPSBGN03407 mailing-list third-party-advisory vendor-advisory
- HPSBMU03401 mailing-list third-party-advisory vendor-advisory
- HPSBUX03512 mailing-list third-party-advisory vendor-advisory
- HPSBGN03533 mailing-list third-party-advisory vendor-advisory
- [oss-security] 20150520 CVE-2015-4000 - TLS does not properly convey server's ciphersuite choice mailing-list third-party-advisory
- RHSA-2015:1072 third-party-advisory vendor-advisory
- RHSA-2015:1185 third-party-advisory vendor-advisory
- RHSA-2015:1197 third-party-advisory vendor-advisory
- RHSA-2015:1228 third-party-advisory vendor-advisory
- RHSA-2015:1229 third-party-advisory vendor-advisory
- RHSA-2015:1230 third-party-advisory vendor-advisory
- RHSA-2015:1241 third-party-advisory vendor-advisory
- RHSA-2015:1242 third-party-advisory vendor-advisory
- RHSA-2015:1243 third-party-advisory vendor-advisory
- RHSA-2015:1485 third-party-advisory vendor-advisory
- RHSA-2015:1486 third-party-advisory vendor-advisory
- RHSA-2015:1488 third-party-advisory vendor-advisory
- RHSA-2015:1526 third-party-advisory vendor-advisory
- RHSA-2015:1544 third-party-advisory vendor-advisory
- RHSA-2015:1604 third-party-advisory vendor-advisory
- RHSA-2016:1624 third-party-advisory vendor-advisory
- RHSA-2016:2056 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.citrix.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- www-304.ibm.com third-party-advisory
- www-304.ibm.com third-party-advisory
- www-304.ibm.com third-party-advisory
- www-304.ibm.com third-party-advisory
- www-304.ibm.com third-party-advisory