CveMateVulnerability intelligence

CVE-2015-2808: canonical ubuntu_linux

Modified

AliasesUBUNTU-CVE-2015-2808

Published 01-04-2015Last modified 28-05-2026

Vulnerability summary

CVE-2015-2808 is a medium (CVSS 5.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 73.85% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 3.7, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

73.85%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

01-04-2015
PublishedVulnerability first disclosed.
28-05-2026
Last modifiedVulnerability information updated.

Description

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.13.7v2.05.0

EPSS trend

Probability

73.85%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 73.85% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-327Use of a Broken or Risky Cryptographic AlgorithmThe product uses a broken or risky cryptographic algorithm or protocol.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Huawei36 products

Show all 36

Redhat7 products

enterprise_linux_desktop5.0 | 6.0 | 7.0
enterprise_linux_eus6.6 | 7.1 | 7.2 | 7.3 | 7.4 | 7.5 | 7.6 | 7.7
enterprise_linux_server5.0 | 6.0 | 7.0
enterprise_linux_server_aus6.6 | 7.3 | 7.4 | 7.6 | 7.7
enterprise_linux_server_tus7.3 | 7.6 | 7.7

Show all 7

Fujitsu5 products

sparc_enterprise_m3000_firmware≥ xcp, < xcp_1121
sparc_enterprise_m4000_firmware≥ xcp, < xcp_1121
sparc_enterprise_m5000_firmware≥ xcp, < xcp_1121
sparc_enterprise_m8000_firmware≥ xcp, < xcp_1121
sparc_enterprise_m9000_firmware≥ xcp, < xcp_1121

Suse5 products

linux_enterprise_debuginfo11:sp3 | 11:sp4
linux_enterprise_desktop11:sp3 | 11:sp4 | 12
linux_enterprise_server10:sp4 | 11:sp1 | 11:sp2 | 11:sp3 | 12
linux_enterprise_software_development_kit11:sp3 | 12
manager1.7

Oracle4 products

communications_application_session_controller≥ 3.0.0, ≤ 3.9.0
communications_policy_management< 9.9.2
http_server11.1.1.7.0 | 11.1.1.9.0 | 12.1.3.0.0 | 12.2.1.1.0 | 12.2.1.2.0
integrated_lights_out_manager_firmware≥ 3.0.0, ≤ 3.2.11 | ≥ 4.0.0, ≤ 4.0.4

Ubuntu2 products

openjdk-6< 6b36-1.13.8-0ubuntu1~14.04
openjdk-7< 7u79-2.5.6-0ubuntu1.14.04.1

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 15.04

Debian1 product

debian_linuxEOL7.0 | 8.0

Ibm1 product

cognos_metrics_manager10.1 | 10.1.1 | 10.2 | 10.2.1 | 10.2.2

Opensuse1 product

opensuseEOL13.1 | 13.2

10 vendors · 63 products

References

105 links

marc.info?l=bugtraq&m=143818140118771&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1243.htmlVendor AdvisoryThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1007.htmlVendor AdvisoryThird Party Advisory
marc.info?l=bugtraq&m=143817899717054&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
marc.info?l=bugtraq&m=144493176821532&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1006.htmlVendor AdvisoryThird Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256Third Party Advisory
kb.juniper.net/JSA10783Third Party Advisory
www.securitytracker.com/id/1033737VDB EntryThird Party Advisory

Show all 100 references

lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.htmlVendor AdvisoryMailing ListThird Party Advisory
marc.info?l=bugtraq&m=144060576831314&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlPatchThird Party Advisory
www.securitytracker.com/id/1036222VDB EntryThird Party Advisory
h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034Third Party Advisory
www-304.ibm.com/support/docview.wss?uid=swg21960769Third Party Advisory
security.gentoo.org/glsa/201512-10Vendor AdvisoryThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1229.htmlVendor AdvisoryThird Party Advisory
h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650Third Party Advisory
www.securitytracker.com/id/1032600VDB EntryThird Party Advisory
www.securitytracker.com/id/1032910VDB EntryThird Party Advisory
www.ubuntu.com/usn/USN-2706-1Vendor AdvisoryThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1526.htmlVendor AdvisoryThird Party Advisory
marc.info?l=bugtraq&m=143817021313142&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory
www.securitytracker.com/id/1032599VDB EntryThird Party Advisory
marc.info?l=bugtraq&m=144104533800819&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www-304.ibm.com/support/docview.wss?uid=swg21903565Third Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190Third Party Advisory
h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380Third Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10163Broken Link
marc.info?l=bugtraq&m=144043644216842&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.securitytracker.com/id/1032734VDB EntryThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg1IV71892Vendor AdvisoryThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347Third Party Advisory
www.securitytracker.com/id/1033769VDB EntryThird Party Advisory
www.securitytracker.com/id/1032707VDB EntryThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.htmlVendor AdvisoryMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1091.htmlVendor AdvisoryThird Party Advisory
marc.info?l=bugtraq&m=144069189622016&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg1IV71888Vendor AdvisoryThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1228.htmlVendor AdvisoryThird Party Advisory
marc.info?l=bugtraq&m=144060606031437&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.securitytracker.com/id/1032708VDB EntryThird Party Advisory
www.huawei.com/en/psirt/security-advisories/hw-454055Third Party Advisory
www.debian.org/security/2015/dsa-3316Vendor AdvisoryThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.htmlVendor AdvisoryMailing ListThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlThird Party Advisory
www.securitytracker.com/id/1033415VDB EntryThird Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246Third Party Advisory
www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709Third Party Advisory
marc.info?l=bugtraq&m=144104565600964&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21883640Third Party Advisory
marc.info?l=bugtraq&m=144102017024820&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.securitytracker.com/id/1033432VDB EntryThird Party Advisory
marc.info?l=bugtraq&m=143629696317098&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.htmlVendor AdvisoryMailing ListThird Party Advisory
www.securitytracker.com/id/1032858VDB EntryThird Party Advisory
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922Vendor AdvisoryThird Party Advisory
www.securitytracker.com/id/1032788VDB EntryThird Party Advisory
www.ubuntu.com/usn/USN-2696-1Vendor AdvisoryThird Party Advisory
www.blackhat.com/docs/…Technical DescriptionThird Party AdvisoryREPORT
www.debian.org/security/2015/dsa-3339Vendor AdvisoryThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1020.htmlVendor AdvisoryThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1242.htmlVendor AdvisoryThird Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10727Third Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.htmlVendor AdvisoryMailing ListThird Party Advisory
www.securitytracker.com/id/1033431VDB EntryThird Party Advisory
www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htmThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988Third Party Advisory
www.securitytracker.com/id/1032868VDB EntryThird Party Advisory
marc.info?l=bugtraq&m=144059703728085&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlThird Party Advisory
www.securityfocus.com/bid/91787VDB EntryThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.htmlVendor AdvisoryMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.htmlVendor AdvisoryMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.htmlVendor AdvisoryMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2015-1241.htmlVendor AdvisoryThird Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140Third Party Advisory
kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1230.htmlVendor AdvisoryThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888Third Party Advisory
marc.info?l=bugtraq&m=143456209711959&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.securitytracker.com/id/1033386VDB EntryThird Party Advisory
marc.info?l=bugtraq&m=143741441012338&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.securitytracker.com/id/1033072VDB EntryThird Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.htmlVendor AdvisoryMailing ListThird Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1021.htmlVendor AdvisoryThird Party Advisory
www-304.ibm.com/support/docview.wss?uid=swg21960015Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.htmlVendor AdvisoryMailing ListThird Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.htmlVendor AdvisoryMailing ListThird Party Advisory
marc.info?l=bugtraq&m=144059660127919&w=2Vendor AdvisoryIssue TrackingThird Party Advisory
www.securityfocus.com/bid/73684VDB EntryThird Party Advisory
www.securitytracker.com/id/1032990VDB EntryThird Party Advisory
www.securitytracker.com/id/1033071VDB EntryThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.htmlVendor AdvisoryMailing ListThird Party Advisory

Showing 100 of 105.