The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before…
Priority HIGH 65CWE-310Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- Partial Red Hat: 22 fixed, 7 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.98685 99th percentileScored 2026-11-07
Fix Partial Red Hat: 4 advisoriesRed Hat: 22 fixed, 7 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* | up to 0.9.8zc | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:* | 1.0.0a | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:* | 1.0.0b | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:* | 1.0.0c | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:* | 1.0.0d | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:* | 1.0.0e | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:* | 1.0.0f | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:* | 1.0.0g | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:* | 1.0.0h | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:* | 1.0.0i | Vulnerable | OpenSSL |
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions up to 0.9.8zc Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:* Versions 1.0.0a Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:* Versions 1.0.0b Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:* Versions 1.0.0c Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:* Versions 1.0.0d Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:* Versions 1.0.0e Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:* Versions 1.0.0f Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:* Versions 1.0.0g Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:* Versions 1.0.0h Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:* Versions 1.0.0i Vulnerable ·OpenSSL
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:* | 1.0.0j | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:* | 1.0.0k | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:* | 1.0.0l | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:* | 1.0.0m | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:* | 1.0.0n | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:* | 1.0.0o | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:* | 1.0.1a | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:* | 1.0.1b | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:* | 1.0.1c | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:* | 1.0.1d | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:* | 1.0.1e | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:* | 1.0.1f | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:* | 1.0.1g | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:* | 1.0.1h | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:* | 1.0.1i | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:* | 1.0.1j | Vulnerable | OpenSSL |
- cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:* Versions 1.0.0j Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:* Versions 1.0.0k Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:* Versions 1.0.0l Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:* Versions 1.0.0m Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:* Versions 1.0.0n Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:* Versions 1.0.0o Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:* Versions 1.0.1a Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:* Versions 1.0.1b Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:* Versions 1.0.1c Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:* Versions 1.0.1d Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:* Versions 1.0.1e Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:* Versions 1.0.1f Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:* Versions 1.0.1g Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:* Versions 1.0.1h Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:* Versions 1.0.1i Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:* Versions 1.0.1j Vulnerable ·OpenSSL
Remediation
Red Hat 4 advisories
- RHSA-2016:1650 Released 2016-08-22 · Red Hat rating ImportantRed Hat JBoss Web Server 2.1.1 security update
- Red Hat JBoss Web Server 2.1
- RHSA-2015:0849 Released 2015-04-16 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 6.4.0 update
- Red Hat JBoss Enterprise Application Platform 6.4
- RHSA-2015:0800 Released 2015-04-13 · Red Hat rating Moderateopenssl security update
- Red Hat Enterprise Linux (v. 5 server) openssl-0.9.8e-33.el5_11, openssl-0.9.8e-33.el5_11.i386, openssl-0.9.8e-33.el5_11.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) openssl-0.9.8e-33.el5_11, openssl-0.9.8e-33.el5_11.i386, openssl-perl-0.9.8e-33.el5_11 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl-0.9.8e-33.el5_11, openssl-devel-0.9.8e-33.el5_11, openssl-devel-0.9.8e-33.el5_11.i386
Show 1 more Red Hat advisories
- RHSA-2015:0066 Released 2015-01-21 · Red Hat rating Moderateopenssl security update
- Red Hat Enterprise Linux Client (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-libs-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux Client Optional (v. 7) openssl-devel-1:1.0.1e-34.el7_0.7, openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux ComputeNode (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-libs-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-devel-1:1.0.1e-34.el7_0.7, openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux Desktop (v. 6) openssl-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.5, openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux HPC Node (v. 6) openssl-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-devel-1.0.1e-30.el6_6.5, openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Server (v. 6) openssl-1.0.1e-30.el6_6.5, openssl-1.0.1e-30.el6_6.5.ppc, openssl-devel-1.0.1e-30.el6_6.5 +1
- Red Hat Enterprise Linux Server (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-devel-1:1.0.1e-34.el7_0.7, openssl-devel-1:1.0.1e-34.el7_0.7.ppc +2
- Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7.ppc
- Red Hat Enterprise Linux Workstation (v. 6) openssl-1.0.1e-30.el6_6.5, openssl-devel-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Workstation (v. 7) openssl-1:1.0.1e-34.el7_0.7, openssl-devel-1:1.0.1e-34.el7_0.7, openssl-libs-1:1.0.1e-34.el7_0.7
- Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl-1.0.1e-30.el6_6.5, openssl-static-1.0.1e-30.el6_6.5
- Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl-1:1.0.1e-34.el7_0.7, openssl-static-1:1.0.1e-34.el7_0.7
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Enterprise Application Platform 6 | Affected | No fix yet |
| Red Hat JBoss Enterprise Web Server 1 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Enterprise Web Server 3 | Affected | No fix yet |
| Red Hat Storage 2 | Affected | No fix yet |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2015:0800 |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2015:0800 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Desktop Workstation (v. 5 client) | Fixed | RHSA-2015:0800 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2015:0066 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2015:0066 |
| Red Hat JBoss Enterprise Application Platform 6.4 | Fixed | RHSA-2015:0849 |
| Red Hat JBoss Web Server 2.1 | Fixed | RHSA-2016:1650 |
| Red Hat JBoss Web Server 3.0 | Fixed | — |
Timeline
- 2026-10-02 Threatist record created from CVE-2015-0204
- 2026-10-03 Alias added: GHSA-ff55-77ff-xv8x
- 2026-10-15 CISA SSVC decision points changed
References
Advisory 39
- SUSE-SU-2015:2182
- HPSBOV03318
- openSUSE-SU-2015:0130
- 20150310 Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
- HPSBGN03299
- SUSE-SU-2015:2192
- HPSBMU03409
- HPSBMU03380
- HPSBMU03345
- RHSA-2015:0849
- HPSBHF03289
- openSUSE-SU-2016:0640
- https://www.openssl.org/news/secadv_20150108.txt
- MDVSA-2015:019
- SUSE-SU-2015:2166
- RHSA-2015:0066
- HPSBUX03334
- https://freakattack.com/
- MDVSA-2015:063
- HPSBUX03244
- APPLE-SA-2015-04-08-2
- SUSE-SU-2015:1138
- SUSE-SU-2015:0578
- SUSE-SU-2015:2216
- SUSE-SU-2015:1086
- SUSE-SU-2015:0946
- HPSBMU03397
- RHSA-2016:1650
- RHSA-2015:0800
- HPSBMU03396
- HPSBUX03162
- MDVSA-2015:062
- SUSE-SU-2015:2168
- SUSE-SU-2015:1085
- HPSBMU03413
- SUSE-SU-2015:1161
- GLSA-201503-11
- DSA-3125
- SUSE-SU-2016:0113
Other 23
- https://kc.mcafee.com/corporate/index?page=content&id=SB10110
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- https://support.apple.com/HT204659
- https://www.openssl.org/news/secadv_20150319.txt
- http://www-304.ibm.com/support/docview.wss?uid=swg21960769
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://support.novell.com/security/cve/CVE-2015-0204.html
- http://www-01.ibm.com/support/docview.wss?uid=swg21883640
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10108
- https://kc.mcafee.com/corporate/index?page=content&id=SB10102
- https://bto.bluecoat.com/security-advisory/sa91
- https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- https://support.citrix.com/article/CTX216642
- https://bto.bluecoat.com/security-advisory/sa88
More Openssl vulnerabilities
- TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
- TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
- TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
Sources
- CVE-2015-0204 · CVE Program
- CVE-2015-0204 · NVD
- FIRST EPSS
- GHSA-ff55-77ff-xv8x · GitHub Advisory Database · CC BY 4.0
- CVE-2015-0204 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences