Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2015-2808 Details

Description

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:3.7 LOWVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034	CVE	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	CVE	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727	CVE	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=143456209711959&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143629696317098&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143741441012338&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143817021313142&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143817899717054&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143818140118771&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144043644216842&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144059660127919&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144059703728085&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144060576831314&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144060606031437&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144069189622016&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144102017024820&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144104533800819&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144104565600964&w=2	CVE	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144493176821532&w=2	CVE	Issue TrackingThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1006.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1007.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1020.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1021.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1091.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1228.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1229.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1230.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1241.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1242.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1243.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1526.html	CVE	Third Party Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650	CVE	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888	CVE	Third Party Advisory
https://kb.juniper.net/JSA10783	CVE	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10163	CVE	Broken Link
https://security.gentoo.org/glsa/201512-10	CVE	Third Party Advisory
https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709	CVE	Third Party Advisory
https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf	CVE	Technical DescriptionThird Party Advisory
https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/	CVE
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892	CVE	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21883640	CVE	Third Party Advisory
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm	CVE	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21903565	CVE	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21960015	CVE	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21960769	CVE	Third Party Advisory
http://www.debian.org/security/2015/dsa-3316	CVE	Third Party Advisory
http://www.debian.org/security/2015/dsa-3339	CVE	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-454055	CVE	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	CVE	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	CVE	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	CVE	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	CVE	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	CVE	Third Party Advisory
http://www.securityfocus.com/bid/73684	CVE	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91787	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032599	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032600	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032707	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032708	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032734	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032788	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032858	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032868	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032910	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032990	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033071	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033072	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033386	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033415	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033431	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033432	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033737	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033769	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036222	CVE	Third Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/USN-2696-1	CVE	Third Party Advisory
http://www.ubuntu.com/usn/USN-2706-1	CVE	Third Party Advisory
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034	[email protected]	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705	[email protected]	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727	[email protected]	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=143456209711959&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143629696317098&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143741441012338&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143817021313142&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143817899717054&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=143818140118771&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144043644216842&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144059660127919&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144059703728085&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144060576831314&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144060606031437&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144069189622016&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144102017024820&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144104533800819&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144104565600964&w=2	[email protected]	Issue TrackingThird Party Advisory
http://marc.info/?l=bugtraq&m=144493176821532&w=2	[email protected]	Issue TrackingThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1006.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1007.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1020.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1021.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1091.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1228.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1229.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1230.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1241.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1242.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1243.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1526.html	[email protected]	Third Party Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888	[email protected]	Third Party Advisory
https://kb.juniper.net/JSA10783	[email protected]	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10163	[email protected]	Broken Link
https://security.gentoo.org/glsa/201512-10	[email protected]	Third Party Advisory
https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709	[email protected]	Third Party Advisory
https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf	[email protected]	Technical DescriptionThird Party Advisory
https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/	[email protected]
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892	[email protected]	Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21883640	[email protected]	Third Party Advisory
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm	[email protected]	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21903565	[email protected]	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21960015	[email protected]	Third Party Advisory
http://www-304.ibm.com/support/docview.wss?uid=swg21960769	[email protected]	Third Party Advisory
http://www.debian.org/security/2015/dsa-3316	[email protected]	Third Party Advisory
http://www.debian.org/security/2015/dsa-3339	[email protected]	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/hw-454055	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	[email protected]	PatchThird Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/73684	[email protected]	Third Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/91787	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032599	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032600	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032707	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032708	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032734	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032788	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032858	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032868	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032910	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1032990	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033071	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033072	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033386	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033415	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033431	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033432	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033737	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033769	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036222	[email protected]	Third Party AdvisoryVDB Entry
http://www.ubuntu.com/usn/USN-2696-1	[email protected]	Third Party Advisory
http://www.ubuntu.com/usn/USN-2706-1	[email protected]	Third Party Advisory

see all 202 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-327	Use of a Broken or Risky Cryptographic Algorithm	[email protected]
CWE-327	Use of a Broken or Risky Cryptographic Algorithm	CISA-ADP

Affected Products

Product	Versions
oracle communications application session controller	>= 3.0.0, <= 3.9.0
CPE cpe:2.3:a:oracle:communications_application_session_controller:::::::: Remediation No remediation found in references.
oracle communications policy management	< 9.9.2
CPE cpe:2.3:a:oracle:communications_policy_management:::::::: Remediation No remediation found in references.
oracle http server	11.1.1.7.0 11.1.1.9.0 12.1.3.0.0 12.2.1.1.0 12.2.1.2.0
CPE cpe:2.3:a:oracle:http_server:11.1.1.7.0:::::::* cpe:2.3:a:oracle:http_server:11.1.1.9.0:::::::* cpe:2.3:a:oracle:http_server:12.1.3.0.0:::::::* cpe:2.3:a:oracle:http_server:12.2.1.1.0:::::::* cpe:2.3:a:oracle:http_server:12.2.1.2.0:::::::* Remediation No remediation found in references.
oracle integrated lights out manager firmware	>= 3.0.0, <= 3.2.11 >= 4.0.0, <= 4.0.4
CPE cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:::::::: Remediation No remediation found in references.
debian debian linux	7.0 8.0
CPE cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:8.0:::::::* Remediation No remediation found in references.
redhat satellite	5.7 5.6
CPE cpe:2.3:a:redhat:satellite:5.7:::::::* cpe:2.3:a:redhat:satellite:5.6:::::::* Remediation No remediation found in references.
redhat enterprise linux desktop	5.0 6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux eus	6.6 7.1 7.2 7.3 7.4
CPE cpe:2.3:o:redhat:enterprise_linux_eus:6.6:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.1:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.2:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.3:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.5:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_eus:7.7:::::::* Remediation No remediation found in references.
redhat enterprise linux server	5.0 6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server aus	6.6 7.3 7.4 7.6 7.7
CPE cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:::::::* Remediation No remediation found in references.
redhat enterprise linux server tus	7.3 7.6 7.7
CPE cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:::::::* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:::::::* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:::::::* Remediation No remediation found in references.
redhat enterprise linux workstation	5.0 6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::* Remediation No remediation found in references.
suse linux enterprise debuginfo	11 sp3 11 sp4
CPE cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:::::: cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:::::: Remediation No remediation found in references.
opensuse opensuse	13.1 13.2
CPE cpe:2.3:o:opensuse:opensuse:13.1:::::::* cpe:2.3:o:opensuse:opensuse:13.2:::::::* Remediation No remediation found in references.
suse linux enterprise desktop	11 sp3 11 sp4 12 -
CPE cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:::::: cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:::::: cpe:2.3:o:suse:linux_enterprise_desktop:12:-:::::: Remediation No remediation found in references.
suse linux enterprise server	10 sp4 11 sp1 11 sp2 11 sp3 12 -
CPE cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::ltss:::* cpe:2.3:o:suse:linux_enterprise_server:11:sp1:::ltss:::* cpe:2.3:o:suse:linux_enterprise_server:11:sp2:::ltss:::* cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware::* cpe:2.3:o:suse:linux_enterprise_server:12:-:::::: cpe:2.3:o:suse:linux_enterprise_server:11:sp2::::-::* Remediation No remediation found in references.
suse linux enterprise software development kit	11 sp3 12 -
CPE cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:::::: Remediation No remediation found in references.
suse manager	1.7
CPE cpe:2.3:a:suse:manager:1.7:::::::* Remediation No remediation found in references.
canonical ubuntu linux	12.04 14.04 15.04
CPE cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:15.04:::::::* Remediation No remediation found in references.
redhat enterprise linux	5.0 6.0
CPE cpe:2.3:o:redhat:enterprise_linux:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* Remediation No remediation found in references.
fujitsu sparc enterprise m3000 firmware	>= xcp, < xcp_1121
CPE cpe:2.3:o:fujitsu:sparc_enterprise_m3000_firmware:::::::: Remediation No remediation found in references.
fujitsu sparc enterprise m3000	All versions
CPE cpe:2.3:h:fujitsu:sparc_enterprise_m3000:-:::::::* Remediation No remediation found in references.
fujitsu sparc enterprise m4000 firmware	>= xcp, < xcp_1121
CPE cpe:2.3:o:fujitsu:sparc_enterprise_m4000_firmware:::::::: Remediation No remediation found in references.
fujitsu sparc enterprise m4000	All versions
CPE cpe:2.3:h:fujitsu:sparc_enterprise_m4000:-:::::::* Remediation No remediation found in references.
fujitsu sparc enterprise m5000 firmware	>= xcp, < xcp_1121
CPE cpe:2.3:o:fujitsu:sparc_enterprise_m5000_firmware:::::::: Remediation No remediation found in references.
fujitsu sparc enterprise m5000	All versions
CPE cpe:2.3:h:fujitsu:sparc_enterprise_m5000:-:::::::* Remediation No remediation found in references.
fujitsu sparc enterprise m8000 firmware	>= xcp, < xcp_1121
CPE cpe:2.3:o:fujitsu:sparc_enterprise_m8000_firmware:::::::: Remediation No remediation found in references.
fujitsu sparc enterprise m8000	All versions
CPE cpe:2.3:h:fujitsu:sparc_enterprise_m8000:-:::::::* Remediation No remediation found in references.
fujitsu sparc enterprise m9000 firmware	>= xcp, < xcp_1121
CPE cpe:2.3:o:fujitsu:sparc_enterprise_m9000_firmware:::::::: Remediation No remediation found in references.
fujitsu sparc enterprise m9000	All versions
CPE cpe:2.3:h:fujitsu:sparc_enterprise_m9000:-:::::::* Remediation No remediation found in references.
huawei e6000 firmware	All versions
CPE cpe:2.3:o:huawei:e6000_firmware:-:::::::* Remediation No remediation found in references.
huawei e6000	All versions
CPE cpe:2.3:h:huawei:e6000:-:::::::* Remediation No remediation found in references.
huawei e9000 firmware	All versions
CPE cpe:2.3:o:huawei:e9000_firmware:-:::::::* Remediation No remediation found in references.
huawei e9000	All versions
CPE cpe:2.3:h:huawei:e9000:-:::::::* Remediation No remediation found in references.
huawei oceanstor 18500 firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_18500_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor 18500	All versions
CPE cpe:2.3:h:huawei:oceanstor_18500:-:::::::* Remediation No remediation found in references.
huawei oceanstor 18800 firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_18800_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor 18800	All versions
CPE cpe:2.3:h:huawei:oceanstor_18800:-:::::::* Remediation No remediation found in references.
huawei oceanstor 18800f firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_18800f_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor 18800f	All versions
CPE cpe:2.3:h:huawei:oceanstor_18800f:-:::::::* Remediation No remediation found in references.
huawei oceanstor 9000 firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_9000_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor 9000	All versions
CPE cpe:2.3:h:huawei:oceanstor_9000:-:::::::* Remediation No remediation found in references.
huawei oceanstor cse firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_cse_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor cse	All versions
CPE cpe:2.3:h:huawei:oceanstor_cse:-:::::::* Remediation No remediation found in references.
huawei oceanstor hvs85t firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor hvs85t	All versions
CPE cpe:2.3:h:huawei:oceanstor_hvs85t:-:::::::* Remediation No remediation found in references.
huawei oceanstor s2600t firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_s2600t_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor s2600t	All versions
CPE cpe:2.3:h:huawei:oceanstor_s2600t:-:::::::* Remediation No remediation found in references.
huawei oceanstor s5500t firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_s5500t_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor s5500t	All versions
CPE cpe:2.3:h:huawei:oceanstor_s5500t:-:::::::* Remediation No remediation found in references.
huawei oceanstor s5600t firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_s5600t_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor s5600t	All versions
CPE cpe:2.3:h:huawei:oceanstor_s5600t:-:::::::* Remediation No remediation found in references.
huawei oceanstor s5800t firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_s5800t_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor s5800t	All versions
CPE cpe:2.3:h:huawei:oceanstor_s5800t:-:::::::* Remediation No remediation found in references.
huawei oceanstor s6800t firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_s6800t_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor s6800t	All versions
CPE cpe:2.3:h:huawei:oceanstor_s6800t:-:::::::* Remediation No remediation found in references.
huawei oceanstor vis6600t firmware	All versions
CPE cpe:2.3:o:huawei:oceanstor_vis6600t_firmware:-:::::::* Remediation No remediation found in references.
huawei oceanstor vis6600t	All versions
CPE cpe:2.3:h:huawei:oceanstor_vis6600t:-:::::::* Remediation No remediation found in references.
huawei quidway s9300 firmware	All versions
CPE cpe:2.3:o:huawei:quidway_s9300_firmware:-:::::::* Remediation No remediation found in references.
huawei quidway s9300	All versions
CPE cpe:2.3:h:huawei:quidway_s9300:-:::::::* Remediation No remediation found in references.
huawei s7700 firmware	All versions
CPE cpe:2.3:o:huawei:s7700_firmware:-:::::::* Remediation No remediation found in references.
huawei s7700	All versions
CPE cpe:2.3:h:huawei:s7700:-:::::::* Remediation No remediation found in references.
huawei 9700 firmware	All versions
CPE cpe:2.3:o:huawei:9700_firmware:-:::::::* Remediation No remediation found in references.
huawei 9700	All versions
CPE cpe:2.3:h:huawei:9700:-:::::::* Remediation No remediation found in references.
huawei s12700 firmware	All versions
CPE cpe:2.3:o:huawei:s12700_firmware:-:::::::* Remediation No remediation found in references.
huawei s12700	All versions
CPE cpe:2.3:h:huawei:s12700:-:::::::* Remediation No remediation found in references.
huawei s2700 firmware	All versions
CPE cpe:2.3:o:huawei:s2700_firmware:-:::::::* Remediation No remediation found in references.
huawei s2700	All versions
CPE cpe:2.3:h:huawei:s2700:-:::::::* Remediation No remediation found in references.
huawei s3700 firmware	All versions
CPE cpe:2.3:o:huawei:s3700_firmware:-:::::::* Remediation No remediation found in references.
huawei s3700	All versions
CPE cpe:2.3:h:huawei:s3700:-:::::::* Remediation No remediation found in references.
huawei s5700ei firmware	All versions
CPE cpe:2.3:o:huawei:s5700ei_firmware:-:::::::* Remediation No remediation found in references.
huawei s5700ei	All versions
CPE cpe:2.3:h:huawei:s5700ei:-:::::::* Remediation No remediation found in references.
huawei s5700hi firmware	All versions
CPE cpe:2.3:o:huawei:s5700hi_firmware:-:::::::* Remediation No remediation found in references.
huawei s5700hi	All versions
CPE cpe:2.3:h:huawei:s5700hi:-:::::::* Remediation No remediation found in references.
huawei s5700si firmware	All versions
CPE cpe:2.3:o:huawei:s5700si_firmware:-:::::::* Remediation No remediation found in references.
huawei s5700si	All versions
CPE cpe:2.3:h:huawei:s5700si:-:::::::* Remediation No remediation found in references.
huawei s5710ei firmware	All versions
CPE cpe:2.3:o:huawei:s5710ei_firmware:-:::::::* Remediation No remediation found in references.
huawei s5710ei	All versions
CPE cpe:2.3:h:huawei:s5710ei:-:::::::* Remediation No remediation found in references.
huawei s5710hi firmware	All versions
CPE cpe:2.3:o:huawei:s5710hi_firmware:-:::::::* Remediation No remediation found in references.
huawei s5710hi	All versions
CPE cpe:2.3:h:huawei:s5710hi:-:::::::* Remediation No remediation found in references.
huawei s6700 firmware	All versions
CPE cpe:2.3:o:huawei:s6700_firmware:-:::::::* Remediation No remediation found in references.
huawei s6700	All versions
CPE cpe:2.3:h:huawei:s6700:-:::::::* Remediation No remediation found in references.
huawei s2750 firmware	All versions
CPE cpe:2.3:o:huawei:s2750_firmware:-:::::::* Remediation No remediation found in references.
huawei s2750	All versions
CPE cpe:2.3:h:huawei:s2750:-:::::::* Remediation No remediation found in references.
huawei s5700li firmware	All versions
CPE cpe:2.3:o:huawei:s5700li_firmware:-:::::::* Remediation No remediation found in references.
huawei s5700li	All versions
CPE cpe:2.3:h:huawei:s5700li:-:::::::* Remediation No remediation found in references.
huawei s5700s-li firmware	All versions
CPE cpe:2.3:o:huawei:s5700s-li_firmware:-:::::::* Remediation No remediation found in references.
huawei s5700s-li	All versions
CPE cpe:2.3:h:huawei:s5700s-li:-:::::::* Remediation No remediation found in references.
huawei s5720hi firmware	All versions
CPE cpe:2.3:o:huawei:s5720hi_firmware:-:::::::* Remediation No remediation found in references.
huawei s5720hi	All versions
CPE cpe:2.3:h:huawei:s5720hi:-:::::::* Remediation No remediation found in references.
huawei s5720ei firmware	All versions
CPE cpe:2.3:o:huawei:s5720ei_firmware:-:::::::* Remediation No remediation found in references.
huawei s5720ei	All versions
CPE cpe:2.3:h:huawei:s5720ei:-:::::::* Remediation No remediation found in references.
huawei te60 firmware	All versions
CPE cpe:2.3:o:huawei:te60_firmware:-:::::::* Remediation No remediation found in references.
huawei te60	All versions
CPE cpe:2.3:h:huawei:te60:-:::::::* Remediation No remediation found in references.
huawei oceanstor replicationdirector	v100r003c00
CPE cpe:2.3:a:huawei:oceanstor_replicationdirector:v100r003c00:::::::* Remediation No remediation found in references.
huawei policy center	v100r003c00 v100r003c10
CPE cpe:2.3:a:huawei:policy_center:v100r003c00:::::::* cpe:2.3:a:huawei:policy_center:v100r003c10:::::::* Remediation No remediation found in references.
huawei smc2.0	v100r002c01 v100r002c02 v100r002c03 v100r002c04
CPE cpe:2.3:a:huawei:smc2.0:v100r002c01:::::::* cpe:2.3:a:huawei:smc2.0:v100r002c02:::::::* cpe:2.3:a:huawei:smc2.0:v100r002c03:::::::* cpe:2.3:a:huawei:smc2.0:v100r002c04:::::::* Remediation No remediation found in references.
huawei ultravr	v100r003c00
CPE cpe:2.3:a:huawei:ultravr:v100r003c00:::::::* Remediation No remediation found in references.
ibm cognos metrics manager	10.1 10.1.1 10.2 10.2.1 10.2.2
CPE cpe:2.3:a:ibm:cognos_metrics_manager:10.1:::::::* cpe:2.3:a:ibm:cognos_metrics_manager:10.1.1:::::::* cpe:2.3:a:ibm:cognos_metrics_manager:10.2:::::::* cpe:2.3:a:ibm:cognos_metrics_manager:10.2.1:::::::* cpe:2.3:a:ibm:cognos_metrics_manager:10.2.2:::::::* Remediation No remediation found in references.

Change History

45 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
May 28, 2026	CVE Modified	CISA-ADP
May 28, 2026	CVE Modified	CISA-ADP
May 27, 2026	CVE Modified	CISA-ADP
May 6, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 7, 2023	CVE Modified	[email protected]
Nov 23, 2020	Modified Analysis	[email protected]
Jan 18, 2018	CVE Modified	[email protected]
Jan 5, 2018	CVE Modified	[email protected]
Nov 8, 2017	CVE Modified	[email protected]
Nov 4, 2017	CVE Modified	[email protected]
Oct 20, 2017	CVE Modified	[email protected]
Sep 23, 2017	CVE Modified	[email protected]
Sep 22, 2017	CVE Modified	[email protected]
Sep 21, 2017	CVE Modified	[email protected]
Sep 6, 2017	CVE Modified	[email protected]
Sep 1, 2017	CVE Modified	[email protected]
May 24, 2017	CVE Modified	[email protected]
Jan 3, 2017	CVE Modified	[email protected]
Dec 28, 2016	CVE Modified	[email protected]
Dec 24, 2016	CVE Modified	[email protected]
Dec 22, 2016	CVE Modified	[email protected]
Dec 8, 2016	CVE Modified	[email protected]
Dec 7, 2016	CVE Modified	[email protected]
Dec 3, 2016	CVE Modified	[email protected]
Nov 28, 2016	CVE Modified	[email protected]
Nov 22, 2016	CVE Modified	[email protected]
Sep 28, 2016	CVE Modified	[email protected]
Aug 23, 2016	CVE Modified	[email protected]
Aug 20, 2016	CVE Modified	[email protected]
Aug 17, 2016	CVE Modified	[email protected]
Aug 9, 2016	CVE Modified	[email protected]
Jul 22, 2016	CVE Modified	[email protected]
Jun 15, 2016	CVE Modified	[email protected]
Jun 3, 2016	CVE Modified	[email protected]
Apr 22, 2016	CVE Modified	[email protected]
Aug 18, 2015	CVE Modified	[email protected]
Jul 17, 2015	CVE Modified	[email protected]
Jul 6, 2015	CVE Modified	[email protected]
Jun 26, 2015	CVE Modified	[email protected]
Apr 1, 2015	Modified Analysis	[email protected]
Apr 1, 2015	Initial Analysis	[email protected]

CVE-2015-2808 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation