Cloudanix VulnDB

CVE-2015-4000

Low · 3.7

CVSS

3.7

EPSS

99.9%

Published

May 21, 2015

CISA due date

—

The record

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.

Affected packages

Ecosystem Package Introduced Fixed
Chainguard chromium 0 0
Chainguard chromium-docker-selenium-compat 0 0
Chainguard chromium-lang 0 0
Chainguard chromium-qt 0 0
Chainguard firefox 0 0
Debian:11 nss 0 2:3.19.1-1
Debian:11 openssl 0 1.0.2b-1
Debian:12 nss 0 2:3.19.1-1
Debian:12 openssl 0 1.0.2b-1
Debian:13 nss 0 2:3.19.1-1
Debian:13 openssl 0 1.0.2b-1
Debian:6.0 openjdk-6 0 6b36-1.13.8-1~deb6u1
Debian:6.0 openssl 0 0.9.8o-4squeeze21
Debian:7 icedove 0 31.8.0-1~deb7u1
Debian:7 iceweasel 0 31.8.0esr-1~deb7u1
Debian:7 nss 0 2:3.14.5-1+deb7u7
Debian:7 openjdk-6 0 6b36-1.13.8-1~deb7u1
Debian:7 openjdk-7 0 7u79-2.5.6-1~deb7u1
Debian:7 openssl 0 1.0.1e-2+deb7u17
Debian:8 icedove 0 31.8.0-1~deb8u1
Debian:8 iceweasel 0 31.8.0esr-1~deb8u1
Debian:8 nss 0 2:3.26-1+debu8u1
Debian:8 openjdk-7 0 7u79-2.5.6-1~deb8u1
Debian:8 openssl 0 1.0.1k-3+deb8u1
Mageia:4 filezilla 0 3.11.0.2-1.mga4
Mageia:4 firefox 0 38.1.0-1.mga4
Mageia:4 firefox-l10n 0 38.1.0-1.mga4
Mageia:4 java-1.7.0-openjdk 0 1.7.0.85-2.6.1.1.mga4
Mageia:4 nss 0 3.19.2-1.mga4
Mageia:4 openssl 0 1.0.1o-1.mga4
Mageia:4 sqlite3 0 3.8.10.2-1.mga4
Mageia:5 filezilla 0 3.11.0.2-1.mga5
Mageia:5 firefox 0 38.1.0-1.mga5
Mageia:5 firefox-l10n 0 38.1.0-1.mga5
Mageia:5 java-1.8.0-openjdk 0 1.8.0.51-1.b16.1.mga5
Mageia:5 nss 0 3.19.2-1.mga5
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-debuginfo 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-demo 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-devel 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-javadoc 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::client java-1.6.0-openjdk-src 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::client java-1.7.0-openjdk 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::client java-1.7.0-openjdk-debuginfo 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::client java-1.7.0-openjdk-demo 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::client java-1.7.0-openjdk-devel 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::client java-1.7.0-openjdk-javadoc 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::client java-1.7.0-openjdk-src 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::client openssl 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::client openssl-debuginfo 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::client openssl-devel 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::client openssl-perl 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::client_workstation openssl 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::client_workstation openssl-debuginfo 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::client_workstation openssl-devel 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::client_workstation openssl-perl 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-debuginfo 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-demo 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-devel 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-javadoc 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::server java-1.6.0-openjdk-src 0 1:1.6.0.36-1.13.8.1.el5_11
Red Hat:enterprise_linux:5::server java-1.7.0-openjdk 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::server java-1.7.0-openjdk-debuginfo 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::server java-1.7.0-openjdk-demo 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::server java-1.7.0-openjdk-devel 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::server java-1.7.0-openjdk-javadoc 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::server java-1.7.0-openjdk-src 0 1:1.7.0.85-2.6.1.3.el5_11
Red Hat:enterprise_linux:5::server openssl 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::server openssl-debuginfo 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::server openssl-devel 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:5::server openssl-perl 0 0:0.9.8e-36.el5_11
Red Hat:enterprise_linux:6::client java-1.6.0-openjdk 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::client java-1.6.0-openjdk-debuginfo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::client java-1.6.0-openjdk-demo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::client java-1.6.0-openjdk-devel 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::client java-1.6.0-openjdk-javadoc 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::client java-1.6.0-openjdk-src 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::client java-1.7.0-openjdk 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::client java-1.7.0-openjdk-debuginfo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::client java-1.7.0-openjdk-demo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::client java-1.7.0-openjdk-devel 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::client java-1.7.0-openjdk-javadoc 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::client java-1.7.0-openjdk-src 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::client java-1.8.0-openjdk 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::client java-1.8.0-openjdk-debuginfo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::client java-1.8.0-openjdk-demo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::client java-1.8.0-openjdk-devel 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::client java-1.8.0-openjdk-headless 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::client java-1.8.0-openjdk-javadoc 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::client java-1.8.0-openjdk-src 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::client nss 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::client nss-debuginfo 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::client nss-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::client nss-pkcs11-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::client nss-sysinit 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::client nss-tools 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::client nss-util 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::client nss-util-debuginfo 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::client nss-util-devel 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::computenode java-1.6.0-openjdk 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::computenode java-1.6.0-openjdk-debuginfo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::computenode java-1.6.0-openjdk-demo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::computenode java-1.6.0-openjdk-devel 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::computenode java-1.6.0-openjdk-javadoc 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::computenode java-1.6.0-openjdk-src 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::computenode java-1.7.0-openjdk 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::computenode java-1.7.0-openjdk-debuginfo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::computenode java-1.7.0-openjdk-demo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::computenode java-1.7.0-openjdk-devel 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::computenode java-1.7.0-openjdk-javadoc 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::computenode java-1.7.0-openjdk-src 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::computenode java-1.8.0-openjdk 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::computenode java-1.8.0-openjdk-debuginfo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::computenode java-1.8.0-openjdk-demo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::computenode java-1.8.0-openjdk-devel 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::computenode java-1.8.0-openjdk-headless 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::computenode java-1.8.0-openjdk-javadoc 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::computenode java-1.8.0-openjdk-src 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::computenode nss 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::computenode nss-debuginfo 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::computenode nss-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::computenode nss-pkcs11-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::computenode nss-sysinit 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::computenode nss-tools 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::computenode nss-util 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::computenode nss-util-debuginfo 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::computenode nss-util-devel 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-debuginfo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-demo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-devel 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-javadoc 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::server java-1.6.0-openjdk-src 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::server java-1.7.0-openjdk 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::server java-1.7.0-openjdk-debuginfo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::server java-1.7.0-openjdk-demo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::server java-1.7.0-openjdk-devel 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::server java-1.7.0-openjdk-javadoc 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::server java-1.7.0-openjdk-src 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::server java-1.8.0-openjdk 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::server java-1.8.0-openjdk-debuginfo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::server java-1.8.0-openjdk-demo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::server java-1.8.0-openjdk-devel 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::server java-1.8.0-openjdk-headless 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::server java-1.8.0-openjdk-javadoc 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::server java-1.8.0-openjdk-src 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::server nss 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::server nss-debuginfo 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::server nss-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::server nss-pkcs11-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::server nss-sysinit 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::server nss-tools 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::server nss-util 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::server nss-util-debuginfo 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::server nss-util-devel 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-30.el6_6.9
Red Hat:enterprise_linux:6::workstation java-1.6.0-openjdk 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::workstation java-1.6.0-openjdk-debuginfo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::workstation java-1.6.0-openjdk-demo 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::workstation java-1.6.0-openjdk-devel 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::workstation java-1.6.0-openjdk-javadoc 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::workstation java-1.6.0-openjdk-src 0 1:1.6.0.36-1.13.8.1.el6_7
Red Hat:enterprise_linux:6::workstation java-1.7.0-openjdk 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::workstation java-1.7.0-openjdk-debuginfo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::workstation java-1.7.0-openjdk-demo 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::workstation java-1.7.0-openjdk-devel 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::workstation java-1.7.0-openjdk-javadoc 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::workstation java-1.7.0-openjdk-src 0 1:1.7.0.85-2.6.1.3.el6_6
Red Hat:enterprise_linux:6::workstation java-1.8.0-openjdk 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::workstation java-1.8.0-openjdk-debuginfo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::workstation java-1.8.0-openjdk-demo 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::workstation java-1.8.0-openjdk-devel 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::workstation java-1.8.0-openjdk-headless 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::workstation java-1.8.0-openjdk-javadoc 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::workstation java-1.8.0-openjdk-src 0 1:1.8.0.51-0.b16.el6_6
Red Hat:enterprise_linux:6::workstation nss 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::workstation nss-debuginfo 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::workstation nss-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::workstation nss-pkcs11-devel 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::workstation nss-sysinit 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::workstation nss-tools 0 0:3.19.1-3.el6_6
Red Hat:enterprise_linux:6::workstation nss-util 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::workstation nss-util-debuginfo 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::workstation nss-util-devel 0 0:3.19.1-1.el6_6
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-30.el6_6.9

Related vulnerabilities