3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.975 High
EPSS
Percentile
100.0%
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.
A flaw was found in the way the TLS protocol composes the Diffie-Hellman
(DH) key exchange. A man-in-the-middle attacker could use this flaw to
force the use of weak 512 bit export-grade keys during the key exchange,
allowing them do decrypt all traffic. (CVE-2015-4000)
Note: This update forces the TLS/SSL client implementation in OpenSSL to
reject DH key sizes below 768 bits, which prevents sessions to be
downgraded to export-grade keys. Future updates may raise this limit to
1024 bits.
All openssl users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. For the update to take
effect, all services linked to the OpenSSL library must be restarted, or
the system rebooted.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 7 | ppc64 | openssl-devel | < 1.0.1e-42.el7_1.6 | openssl-devel-1.0.1e-42.el7_1.6.ppc64.rpm |
RedHat | 7 | s390 | openssl-devel | < 1.0.1e-42.el7_1.6 | openssl-devel-1.0.1e-42.el7_1.6.s390.rpm |
RedHat | 7 | s390x | openssl-perl | < 1.0.1e-42.el7_1.6 | openssl-perl-1.0.1e-42.el7_1.6.s390x.rpm |
RedHat | 7 | s390x | openssl-libs | < 1.0.1e-42.el7_1.6 | openssl-libs-1.0.1e-42.el7_1.6.s390x.rpm |
RedHat | 7 | s390x | openssl-static | < 1.0.1e-42.el7_1.6 | openssl-static-1.0.1e-42.el7_1.6.s390x.rpm |
RedHat | 7 | i686 | openssl-static | < 1.0.1e-42.el7_1.6 | openssl-static-1.0.1e-42.el7_1.6.i686.rpm |
RedHat | 7 | x86_64 | openssl-static | < 1.0.1e-42.el7_1.6 | openssl-static-1.0.1e-42.el7_1.6.x86_64.rpm |
RedHat | 7 | ppc64 | openssl-debuginfo | < 1.0.1e-42.el7_1.6 | openssl-debuginfo-1.0.1e-42.el7_1.6.ppc64.rpm |
RedHat | 7 | x86_64 | openssl-libs | < 1.0.1e-42.el7_1.6 | openssl-libs-1.0.1e-42.el7_1.6.x86_64.rpm |
RedHat | 7 | s390x | openssl | < 1.0.1e-42.el7_1.6 | openssl-1.0.1e-42.el7_1.6.s390x.rpm |
3.7 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.975 High
EPSS
Percentile
100.0%