Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-2808

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Security Impact Summary

CVE-2015-2808 is a security vulnerability that . Impacting 99 products from oracle, from oracle, from oracle and 96 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2015, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2015-04-01T02:00:35.097

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-327

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oracle	communications_application_session_controller	≤ 3.9.0	Yes
Application	oracle	communications_policy_management	< 9.9.2	Yes
Application	oracle	http_server	11.1.1.7.0	Yes
Application	oracle	http_server	11.1.1.9.0	Yes
Application	oracle	http_server	12.1.3.0.0	Yes
Application	oracle	http_server	12.2.1.1.0	Yes
Application	oracle	http_server	12.2.1.2.0	Yes
Operating System	oracle	integrated_lights_out_manager_firmware	≤ 3.2.11	Yes
Operating System	oracle	integrated_lights_out_manager_firmware	≤ 4.0.4	Yes
Operating System	debian	debian_linux	7.0	Yes
Operating System	debian	debian_linux	8.0	Yes
Application	redhat	satellite	5.7	Yes
Operating System	redhat	enterprise_linux_desktop	5.0	Yes
Operating System	redhat	enterprise_linux_desktop	6.0	Yes
Operating System	redhat	enterprise_linux_desktop	7.0	Yes
Operating System	redhat	enterprise_linux_eus	6.6	Yes
Operating System	redhat	enterprise_linux_eus	7.1	Yes
Operating System	redhat	enterprise_linux_eus	7.2	Yes
Operating System	redhat	enterprise_linux_eus	7.3	Yes
Operating System	redhat	enterprise_linux_eus	7.4	Yes
Operating System	redhat	enterprise_linux_eus	7.5	Yes
Operating System	redhat	enterprise_linux_eus	7.6	Yes
Operating System	redhat	enterprise_linux_eus	7.7	Yes
Operating System	redhat	enterprise_linux_server	5.0	Yes
Operating System	redhat	enterprise_linux_server	6.0	Yes
Operating System	redhat	enterprise_linux_server	7.0	Yes
Operating System	redhat	enterprise_linux_server_aus	6.6	Yes
Operating System	redhat	enterprise_linux_server_aus	7.3	Yes
Operating System	redhat	enterprise_linux_server_aus	7.4	Yes
Operating System	redhat	enterprise_linux_server_aus	7.6	Yes
Operating System	redhat	enterprise_linux_server_aus	7.7	Yes
Operating System	redhat	enterprise_linux_server_tus	7.3	Yes
Operating System	redhat	enterprise_linux_server_tus	7.6	Yes
Operating System	redhat	enterprise_linux_server_tus	7.7	Yes
Operating System	redhat	enterprise_linux_workstation	5.0	Yes
Operating System	redhat	enterprise_linux_workstation	6.0	Yes
Operating System	redhat	enterprise_linux_workstation	7.0	Yes
Application	suse	linux_enterprise_debuginfo	11	Yes
Application	suse	linux_enterprise_debuginfo	11	Yes
Operating System	opensuse	opensuse	13.1	Yes
Operating System	opensuse	opensuse	13.2	Yes
Operating System	suse	linux_enterprise_desktop	11	Yes
Operating System	suse	linux_enterprise_desktop	11	Yes
Operating System	suse	linux_enterprise_desktop	12	Yes
Operating System	suse	linux_enterprise_server	10	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	suse	linux_enterprise_server	12	Yes
Operating System	suse	linux_enterprise_software_development_kit	11	Yes
Operating System	suse	linux_enterprise_software_development_kit	12	Yes
Application	suse	manager	1.7	Yes
Operating System	suse	linux_enterprise_server	11	No
Operating System	canonical	ubuntu_linux	12.04	Yes
Operating System	canonical	ubuntu_linux	14.04	Yes
Operating System	canonical	ubuntu_linux	15.04	Yes
Application	redhat	satellite	5.6	Yes
Operating System	redhat	enterprise_linux	5.0	No
Operating System	redhat	enterprise_linux	6.0	No
Operating System	fujitsu	sparc_enterprise_m3000_firmware	< xcp_1121	Yes
Hardware	fujitsu	sparc_enterprise_m3000	-	No
Operating System	fujitsu	sparc_enterprise_m4000_firmware	< xcp_1121	Yes
Hardware	fujitsu	sparc_enterprise_m4000	-	No
Operating System	fujitsu	sparc_enterprise_m5000_firmware	< xcp_1121	Yes
Hardware	fujitsu	sparc_enterprise_m5000	-	No
Operating System	fujitsu	sparc_enterprise_m8000_firmware	< xcp_1121	Yes
Hardware	fujitsu	sparc_enterprise_m8000	-	No
Operating System	fujitsu	sparc_enterprise_m9000_firmware	< xcp_1121	Yes
Hardware	fujitsu	sparc_enterprise_m9000	-	No
Operating System	huawei	e6000_firmware	-	Yes
Hardware	huawei	e6000	-	No
Operating System	huawei	e9000_firmware	-	Yes
Hardware	huawei	e9000	-	No
Operating System	huawei	oceanstor_18500_firmware	-	Yes
Hardware	huawei	oceanstor_18500	-	No
Operating System	huawei	oceanstor_18800_firmware	-	Yes
Hardware	huawei	oceanstor_18800	-	No
Operating System	huawei	oceanstor_18800f_firmware	-	Yes
Hardware	huawei	oceanstor_18800f	-	No
Operating System	huawei	oceanstor_9000_firmware	-	Yes
Hardware	huawei	oceanstor_9000	-	No
Operating System	huawei	oceanstor_cse_firmware	-	Yes
Hardware	huawei	oceanstor_cse	-	No
Operating System	huawei	oceanstor_hvs85t_firmware	-	Yes
Hardware	huawei	oceanstor_hvs85t	-	No
Operating System	huawei	oceanstor_s2600t_firmware	-	Yes
Hardware	huawei	oceanstor_s2600t	-	No
Operating System	huawei	oceanstor_s5500t_firmware	-	Yes
Hardware	huawei	oceanstor_s5500t	-	No
Operating System	huawei	oceanstor_s5600t_firmware	-	Yes
Hardware	huawei	oceanstor_s5600t	-	No
Operating System	huawei	oceanstor_s5800t_firmware	-	Yes
Hardware	huawei	oceanstor_s5800t	-	No
Operating System	huawei	oceanstor_s6800t_firmware	-	Yes
Hardware	huawei	oceanstor_s6800t	-	No
Operating System	huawei	oceanstor_vis6600t_firmware	-	Yes
Hardware	huawei	oceanstor_vis6600t	-	No
Operating System	huawei	quidway_s9300_firmware	-	Yes
Hardware	huawei	quidway_s9300	-	No
Operating System	huawei	s7700_firmware	-	Yes
Hardware	huawei	s7700	-	No
Operating System	huawei	s7700_firmware	-	Yes
Hardware	huawei	s7700	-	No
Operating System	huawei	9700_firmware	-	Yes
Hardware	huawei	9700	-	No
Operating System	huawei	9700_firmware	-	Yes
Hardware	huawei	9700	-	No
Operating System	huawei	s12700_firmware	-	Yes
Hardware	huawei	s12700	-	No
Operating System	huawei	s12700_firmware	-	Yes
Hardware	huawei	s12700	-	No
Operating System	huawei	s2700_firmware	-	Yes
Hardware	huawei	s2700	-	No
Operating System	huawei	s3700_firmware	-	Yes
Hardware	huawei	s3700	-	No
Operating System	huawei	s5700ei_firmware	-	Yes
Hardware	huawei	s5700ei	-	No
Operating System	huawei	s5700hi_firmware	-	Yes
Hardware	huawei	s5700hi	-	No
Operating System	huawei	s5700si_firmware	-	Yes
Hardware	huawei	s5700si	-	No
Operating System	huawei	s5710ei_firmware	-	Yes
Hardware	huawei	s5710ei	-	No
Operating System	huawei	s5710hi_firmware	-	Yes
Hardware	huawei	s5710hi	-	No
Operating System	huawei	s6700_firmware	-	Yes
Hardware	huawei	s6700	-	No
Operating System	huawei	s2750_firmware	-	Yes
Hardware	huawei	s2750	-	No
Operating System	huawei	s5700li_firmware	-	Yes
Hardware	huawei	s5700li	-	No
Operating System	huawei	s5700s-li_firmware	-	Yes
Hardware	huawei	s5700s-li	-	No
Operating System	huawei	s5720hi_firmware	-	Yes
Hardware	huawei	s5720hi	-	No
Operating System	huawei	s2750_firmware	-	Yes
Hardware	huawei	s2750	-	No
Operating System	huawei	s5700li_firmware	-	Yes
Hardware	huawei	s5700li	-	No
Operating System	huawei	s5700s-li_firmware	-	Yes
Hardware	huawei	s5700s-li	-	No
Operating System	huawei	s5720hi_firmware	-	Yes
Hardware	huawei	s5720hi	-	No
Operating System	huawei	s5720ei_firmware	-	Yes
Hardware	huawei	s5720ei	-	No
Operating System	huawei	te60_firmware	-	Yes
Hardware	huawei	te60	-	No
Application	huawei	oceanstor_replicationdirector	v100r003c00	Yes
Application	huawei	policy_center	v100r003c00	Yes
Application	huawei	policy_center	v100r003c10	Yes
Application	huawei	smc2.0	v100r002c01	Yes
Application	huawei	smc2.0	v100r002c02	Yes
Application	huawei	smc2.0	v100r002c03	Yes
Application	huawei	smc2.0	v100r002c04	Yes
Application	huawei	ultravr	v100r003c00	Yes
Application	ibm	cognos_metrics_manager	10.1	Yes
Application	ibm	cognos_metrics_manager	10.1.1	Yes
Application	ibm	cognos_metrics_manager	10.2	Yes
Application	ibm	cognos_metrics_manager	10.2.1	Yes
Application	ibm	cognos_metrics_manager	10.2.2	Yes

References

http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034 Third Party Advisory ([email protected])
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 Third Party Advisory ([email protected])
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727 Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html Mailing List, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=143456209711959&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=143629696317098&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=143741441012338&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=143817021313142&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=143817899717054&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=143818140118771&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144043644216842&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144059660127919&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144059703728085&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144060576831314&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144060606031437&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144069189622016&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144102017024820&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144104533800819&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144104565600964&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=144493176821532&w=2 Issue Tracking, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1006.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1007.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1020.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1021.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1091.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1228.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1229.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1230.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1241.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1242.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1243.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1526.html Third Party Advisory ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888 Third Party Advisory ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892 Third Party Advisory ([email protected])
http://www-01.ibm.com/support/docview.wss?uid=swg21883640 Third Party Advisory ([email protected])
http://www-304.ibm.com/support/docview.wss?uid=swg21903565 Third Party Advisory ([email protected])
http://www-304.ibm.com/support/docview.wss?uid=swg21960015 Third Party Advisory ([email protected])
http://www-304.ibm.com/support/docview.wss?uid=swg21960769 Third Party Advisory ([email protected])
http://www.debian.org/security/2015/dsa-3316 Third Party Advisory ([email protected])
http://www.debian.org/security/2015/dsa-3339 Third Party Advisory ([email protected])
http://www.huawei.com/en/psirt/security-advisories/hw-454055 Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html Patch, Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/73684 Third Party Advisory, VDB Entry ([email protected])
http://www.securityfocus.com/bid/91787 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032599 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032600 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032707 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032708 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032734 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032788 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032858 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032868 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032910 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032990 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033071 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033072 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033386 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033415 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033431 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033432 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033737 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033769 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1036222 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-2696-1 Third Party Advisory ([email protected])
http://www.ubuntu.com/usn/USN-2706-1 Third Party Advisory ([email protected])
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm Third Party Advisory ([email protected])
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922 Third Party Advisory ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140 Third Party Advisory ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190 Third Party Advisory ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119 Third Party Advisory ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241 Third Party Advisory ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256 Third Party Advisory ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 Third Party Advisory ([email protected])
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888 Third Party Advisory ([email protected])
https://kb.juniper.net/JSA10783 Third Party Advisory ([email protected])
https://kc.mcafee.com/corporate/index?page=content&id=SB10163 Broken Link ([email protected])
https://security.gentoo.org/glsa/201512-10 Third Party Advisory ([email protected])
https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709 Third Party Advisory ([email protected])
https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf Technical Description, Third Party Advisory ([email protected])
https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/ ([email protected])
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=143456209711959&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=143629696317098&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=143741441012338&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=143817021313142&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=143817899717054&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=143818140118771&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144043644216842&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144059660127919&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144059703728085&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144060576831314&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144060606031437&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144069189622016&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144102017024820&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144104533800819&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144104565600964&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=144493176821532&w=2 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1006.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1007.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1020.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1021.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1091.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1228.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1229.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1230.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1241.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1242.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1243.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1526.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=swg21883640 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-304.ibm.com/support/docview.wss?uid=swg21903565 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-304.ibm.com/support/docview.wss?uid=swg21960015 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www-304.ibm.com/support/docview.wss?uid=swg21960769 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2015/dsa-3316 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2015/dsa-3339 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.huawei.com/en/psirt/security-advisories/hw-454055 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/73684 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/91787 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032599 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032600 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032707 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032708 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032734 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032788 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032858 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032868 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032910 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032990 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033071 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033072 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033386 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033415 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033431 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033432 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033737 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033769 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1036222 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-2696-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-2706-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://kb.juniper.net/JSA10783 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://kc.mcafee.com/corporate/index?page=content&id=SB10163 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/201512-10 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf Technical Description, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/ (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For oracle's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.