CVE-2015-2808

Published: Apr 1, 2015Modified: May 28, 2026

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Affected (106)

Products: Oracle: Communications Application Session Controller, Communications Policy Management, Http Server, Integrated Lights Out Manager Firmware · Debian: Debian Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Workstation, Satellite · +6 more

Show all products

Oracle

4 products

Communications Application Session Controller

Communications Policy Management

Http Server

Integrated Lights Out Manager Firmware

Debian

1 product

Debian Linux

Redhat

7 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

1 product

5 products

Linux Enterprise Debuginfo

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

1 product

5 products

Sparc Enterprise M3000 Firmware

Sparc Enterprise M4000 Firmware

Sparc Enterprise M5000 Firmware

Sparc Enterprise M8000 Firmware

Sparc Enterprise M9000 Firmware

Huawei

36 products

E6000 Firmware

E9000 Firmware

Oceanstor 18500 Firmware

Oceanstor 18800 Firmware

Oceanstor 18800f Firmware

Oceanstor 9000 Firmware

Oceanstor Cse Firmware

Oceanstor Hvs85t Firmware

Oceanstor S2600t Firmware

Oceanstor S5500t Firmware

Oceanstor S5600t Firmware

Oceanstor S5800t Firmware

Oceanstor S6800t Firmware

Oceanstor Vis6600t Firmware

Quidway S9300 Firmware

Oceanstor Replicationdirector

1 product

Cognos Metrics Manager

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Application Session Controller	From 3.0.0 to 3.9.0
Oracle Communications Policy Management	Before 9.9.2
Oracle Http Server	Version 11.1.1.7.0
Oracle Http Server	Version 11.1.1.9.0
Oracle Http Server	Version 12.1.3.0.0
Oracle Http Server	Version 12.2.1.1.0
Oracle Http Server	Version 12.2.1.2.0
Oracle Integrated Lights Out Manager Firmware	From 3.0.0 to 3.2.11
Oracle Integrated Lights Out Manager Firmware	From 4.0.0 to 4.0.4

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration C

26 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 6.6
Redhat Enterprise Linux Eus	Version 7.1
Redhat Enterprise Linux Eus	Version 7.2
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 6.6
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Satellite	Version 5.7

Configuration D

14 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Debuginfo	Version 11 sp3
Suse Linux Enterprise Debuginfo	Version 11 sp4
Suse Linux Enterprise Desktop	Version 11 sp3
Suse Linux Enterprise Desktop	Version 11 sp4
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Software Development Kit	Version 11 sp3
Suse Linux Enterprise Software Development Kit	Version 12

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Suse Manager	Version 1.7

Running on/with	Platform Versions
Suse Linux Enterprise Server	Version 11 sp2

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 15.04

Configuration G

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Redhat Satellite	Version 5.6

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu Sparc Enterprise M3000 Firmware	From xcp to xcp_1121

Running on/with	Platform Versions
Fujitsu Sparc Enterprise M3000	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu Sparc Enterprise M4000 Firmware	From xcp to xcp_1121

Running on/with	Platform Versions
Fujitsu Sparc Enterprise M4000	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu Sparc Enterprise M5000 Firmware	From xcp to xcp_1121

Running on/with	Platform Versions
Fujitsu Sparc Enterprise M5000	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu Sparc Enterprise M8000 Firmware	From xcp to xcp_1121

Running on/with	Platform Versions
Fujitsu Sparc Enterprise M8000	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fujitsu Sparc Enterprise M9000 Firmware	From xcp to xcp_1121

Running on/with	Platform Versions
Fujitsu Sparc Enterprise M9000	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei E6000 Firmware	All versions

Running on/with	Platform Versions
Huawei E6000	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei E9000 Firmware	All versions

Running on/with	Platform Versions
Huawei E9000	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor 18500 Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor 18500	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor 18800 Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor 18800	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor 18800f Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor 18800f	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor 9000 Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor 9000	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor Cse Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor Cse	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor Hvs85t Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor Hvs85t	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor S2600t Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor S2600t	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor S5500t Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor S5500t	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor S5600t Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor S5600t	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor S5800t Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor S5800t	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor S6800t Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor S6800t	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Oceanstor Vis6600t Firmware	All versions

Running on/with	Platform Versions
Huawei Oceanstor Vis6600t	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Quidway S9300 Firmware	All versions

Running on/with	Platform Versions
Huawei Quidway S9300	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S7700 Firmware	All versions

Running on/with	Platform Versions
Huawei S7700	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei 9700 Firmware	All versions

Running on/with	Platform Versions
Huawei 9700	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S12700 Firmware	All versions

Running on/with	Platform Versions
Huawei S12700	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S2700 Firmware	All versions

Running on/with	Platform Versions
Huawei S2700	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S3700 Firmware	All versions

Running on/with	Platform Versions
Huawei S3700	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5700ei Firmware	All versions

Running on/with	Platform Versions
Huawei S5700ei	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5700hi Firmware	All versions

Running on/with	Platform Versions
Huawei S5700hi	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5700si Firmware	All versions

Running on/with	Platform Versions
Huawei S5700si	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5710ei Firmware	All versions

Running on/with	Platform Versions
Huawei S5710ei	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5710hi Firmware	All versions

Running on/with	Platform Versions
Huawei S5710hi	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S6700 Firmware	All versions

Running on/with	Platform Versions
Huawei S6700	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S2750 Firmware	All versions

Running on/with	Platform Versions
Huawei S2750	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5700li Firmware	All versions

Running on/with	Platform Versions
Huawei S5700li	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5700s Li Firmware	All versions

Running on/with	Platform Versions
Huawei S5700s Li	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5720hi Firmware	All versions

Running on/with	Platform Versions
Huawei S5720hi	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei S5720ei Firmware	All versions

Running on/with	Platform Versions
Huawei S5720ei	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Te60 Firmware	All versions

Running on/with	Platform Versions
Huawei Te60	All versions

Configuration Z

8 vulnerable

Vulnerable Software	Affected Versions
Huawei Oceanstor Replicationdirector	Version v100r003c00
Huawei Policy Center	Version v100r003c00
Huawei Policy Center	Version v100r003c10
Huawei Smc2.0	Version v100r002c01
Huawei Smc2.0	Version v100r002c02
Huawei Smc2.0	Version v100r002c03
Huawei Smc2.0	Version v100r002c04
Huawei Ultravr	Version v100r003c00

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Cognos Metrics Manager	Version 10.1.1
Ibm Cognos Metrics Manager	Version 10.1
Ibm Cognos Metrics Manager	Version 10.2.1
Ibm Cognos Metrics Manager	Version 10.2.2
Ibm Cognos Metrics Manager	Version 10.2

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (202)

http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034

Source: cve@mitre.org

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: cve@mitre.org

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=143456209711959&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=143629696317098&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=143741441012338&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=143817021313142&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=143817899717054&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=143818140118771&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144043644216842&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144059660127919&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144059703728085&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144060576831314&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144060606031437&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144069189622016&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144102017024820&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144104533800819&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144104565600964&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://marc.info/?l=bugtraq&m=144493176821532&w=2

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1006.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1007.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1020.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1021.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1091.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1228.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1229.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1230.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1241.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1242.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1243.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1526.html

Source: cve@mitre.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IV71888

Source: cve@mitre.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg1IV71892

Source: cve@mitre.org

Third Party Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21883640

Source: cve@mitre.org

Third Party Advisory

http://www-304.ibm.com/support/docview.wss?uid=swg21903565

Source: cve@mitre.org

Third Party Advisory

http://www-304.ibm.com/support/docview.wss?uid=swg21960015

Source: cve@mitre.org

Third Party Advisory

http://www-304.ibm.com/support/docview.wss?uid=swg21960769

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3316

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3339

Source: cve@mitre.org

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/hw-454055

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Source: cve@mitre.org

PatchThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/73684

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/91787

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032599

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032600

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032707

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032708

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032734

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032788

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032858

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032868

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032910

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032990

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033071

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033072

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033386

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033415

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033431

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033432

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033737

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033769

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036222

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2696-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2706-1

Source: cve@mitre.org

Third Party Advisory

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454055.htm

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04687922

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773256

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04708650

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04711380

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193347

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888

Source: cve@mitre.org

Third Party Advisory

https://kb.juniper.net/JSA10783

Source: cve@mitre.org

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10163

Source: cve@mitre.org

Broken Link

https://security.gentoo.org/glsa/201512-10

Source: cve@mitre.org

Third Party Advisory

https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098709

Source: cve@mitre.org

Third Party Advisory

https://www.blackhat.com/docs/asia-15/materials/asia-15-Mantin-Bar-Mitzvah-Attack-Breaking-SSL-With-13-Year-Old-RC4-Weakness-wp.pdf

Source: cve@mitre.org

Technical DescriptionThird Party Advisory

https://www.secpod.com/blog/cve-2015-2808-bar-mitzvah-attack-in-rc4-2/

Source: cve@mitre.org

http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034