VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 1, 2015· Updated May 6, 2026

CVE-2015-2808

CVE-2015-2808

Description

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Affected products

105
  • Huawei/Oceanstor Replicationdirector
    cpe:2.3:a:huawei:oceanstor_replicationdirector:v100r003c00:*:*:*:*:*:*:*
  • Huawei/Policy Center2 versions
    cpe:2.3:a:huawei:policy_center:v100r003c00:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:huawei:policy_center:v100r003c00:*:*:*:*:*:*:*
    • cpe:2.3:a:huawei:policy_center:v100r003c10:*:*:*:*:*:*:*
  • Huawei/Smc2.04 versions
    cpe:2.3:a:huawei:smc2.0:v100r002c01:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:huawei:smc2.0:v100r002c01:*:*:*:*:*:*:*
    • cpe:2.3:a:huawei:smc2.0:v100r002c02:*:*:*:*:*:*:*
    • cpe:2.3:a:huawei:smc2.0:v100r002c03:*:*:*:*:*:*:*
    • cpe:2.3:a:huawei:smc2.0:v100r002c04:*:*:*:*:*:*:*
  • Huawei/Ultravr
    cpe:2.3:a:huawei:ultravr:v100r003c00:*:*:*:*:*:*:*
  • IBM/Cognos Metrics Manager5 versions
    cpe:2.3:a:ibm:cognos_metrics_manager:10.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:cognos_metrics_manager:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_metrics_manager:10.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_metrics_manager:10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_metrics_manager:10.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:cognos_metrics_manager:10.2.2:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Application Session Controller
    cpe:2.3:a:oracle:communications_application_session_controller:*:*:*:*:*:*:*:*
    Range: >=3.0.0,<=3.9.0
  • Oracle Corporation/Communications Policy Management
    cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*
    Range: <9.9.2
  • Oracle Corporation/Http Server5 versions
    cpe:2.3:a:oracle:http_server:11.1.1.7.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:http_server:11.1.1.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:http_server:11.1.1.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:http_server:12.1.3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:http_server:12.2.1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:http_server:12.2.1.2.0:*:*:*:*:*:*:*
  • Red Hat/Satellite2 versions
    cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*
  • SUSE S.A./Linux Enterprise Debuginfo2 versions
    cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*
    • cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
  • SUSE S.A./Manager
    cpe:2.3:a:suse:manager:1.7:*:*:*:*:*:*:*
  • Canonical (company)/Ubuntu Linux3 versions
    cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
  • Debian/Debian Linux2 versions
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • Fujitsu/Sparc Enterprise M3000 Firmware
    cpe:2.3:o:fujitsu:sparc_enterprise_m3000_firmware:*:*:*:*:*:*:*:*
    Range: >=xcp,<xcp_1121
  • Fujitsu/Sparc Enterprise M4000 Firmware
    cpe:2.3:o:fujitsu:sparc_enterprise_m4000_firmware:*:*:*:*:*:*:*:*
    Range: >=xcp,<xcp_1121
  • Fujitsu/Sparc Enterprise M5000 Firmware
    cpe:2.3:o:fujitsu:sparc_enterprise_m5000_firmware:*:*:*:*:*:*:*:*
    Range: >=xcp,<xcp_1121
  • Fujitsu/Sparc Enterprise M8000 Firmware
    cpe:2.3:o:fujitsu:sparc_enterprise_m8000_firmware:*:*:*:*:*:*:*:*
    Range: >=xcp,<xcp_1121
  • Fujitsu/Sparc Enterprise M9000 Firmware
    cpe:2.3:o:fujitsu:sparc_enterprise_m9000_firmware:*:*:*:*:*:*:*:*
    Range: >=xcp,<xcp_1121
  • Huawei/9700 Firmware
    cpe:2.3:o:huawei:9700_firmware:-:*:*:*:*:*:*:*
  • Huawei/E6000 Firmware
    cpe:2.3:o:huawei:e6000_firmware:-:*:*:*:*:*:*:*
  • Huawei/E9000 Firmware
    cpe:2.3:o:huawei:e9000_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor 18500 Firmware
    cpe:2.3:o:huawei:oceanstor_18500_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor 18800f Firmware
    cpe:2.3:o:huawei:oceanstor_18800f_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor 18800 Firmware
    cpe:2.3:o:huawei:oceanstor_18800_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor 9000 Firmware
    cpe:2.3:o:huawei:oceanstor_9000_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor Cse Firmware
    cpe:2.3:o:huawei:oceanstor_cse_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor Hvs85t Firmware
    cpe:2.3:o:huawei:oceanstor_hvs85t_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor S2600t Firmware
    cpe:2.3:o:huawei:oceanstor_s2600t_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor S5500t Firmware
    cpe:2.3:o:huawei:oceanstor_s5500t_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor S5600t Firmware
    cpe:2.3:o:huawei:oceanstor_s5600t_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor S5800t Firmware
    cpe:2.3:o:huawei:oceanstor_s5800t_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor S6800t Firmware
    cpe:2.3:o:huawei:oceanstor_s6800t_firmware:-:*:*:*:*:*:*:*
  • Huawei/Oceanstor Vis6600t Firmware
    cpe:2.3:o:huawei:oceanstor_vis6600t_firmware:-:*:*:*:*:*:*:*
  • Huawei/Quidway S9300 Firmware
    cpe:2.3:o:huawei:quidway_s9300_firmware:-:*:*:*:*:*:*:*
  • Huawei/S12700 Firmware
    cpe:2.3:o:huawei:s12700_firmware:-:*:*:*:*:*:*:*
  • Huawei/S2700 Firmware
    cpe:2.3:o:huawei:s2700_firmware:-:*:*:*:*:*:*:*
  • Huawei/S2750 Firmware
    cpe:2.3:o:huawei:s2750_firmware:-:*:*:*:*:*:*:*
  • Huawei/S3700 Firmware
    cpe:2.3:o:huawei:s3700_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5700ei Firmware
    cpe:2.3:o:huawei:s5700ei_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5700hi Firmware
    cpe:2.3:o:huawei:s5700hi_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5700li Firmware
    cpe:2.3:o:huawei:s5700li_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5700si Firmware
    cpe:2.3:o:huawei:s5700si_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5700s Li Firmware
    cpe:2.3:o:huawei:s5700s-li_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5710ei Firmware
    cpe:2.3:o:huawei:s5710ei_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5710hi Firmware
    cpe:2.3:o:huawei:s5710hi_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5720ei Firmware
    cpe:2.3:o:huawei:s5720ei_firmware:-:*:*:*:*:*:*:*
  • Huawei/S5720hi Firmware
    cpe:2.3:o:huawei:s5720hi_firmware:-:*:*:*:*:*:*:*
  • Huawei/S6700 Firmware
    cpe:2.3:o:huawei:s6700_firmware:-:*:*:*:*:*:*:*
  • Huawei/S7700 Firmware
    cpe:2.3:o:huawei:s7700_firmware:-:*:*:*:*:*:*:*
  • Huawei/Te60 Firmware
    cpe:2.3:o:huawei:te60_firmware:-:*:*:*:*:*:*:*
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • Oracle Corporation/Integrated Lights Out Manager Firmware
    cpe:2.3:o:oracle:integrated_lights_out_manager_firmware:*:*:*:*:*:*:*:*
    Range: >=3.0.0,<=3.2.11
  • Red Hat/Enterprise Linux Desktop3 versions
    cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Eus8 versions
    cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:7.1:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server3 versions
    cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server Aus5 versions
    cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server Tus3 versions
    cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Workstation3 versions
    cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
  • SUSE S.A./Linux Enterprise Desktop3 versions
    cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
  • SUSE S.A./Linux Enterprise Server5 versions
    cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*+ 4 more
    • cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
    • cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
  • SUSE S.A./Linux Enterprise Software Development Kit2 versions
    cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

101

News mentions

0

No linked articles in our index yet.