CVE-2015-0204 Weak cryptography in n/a
Remote attackers can downgrade SSL connections to weak export-grade RSA keys, enabling brute-force decryption of traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-0204?
CVE-2015-0204 is a medium-severity vulnerability in Openssl Openssl, published on 9 Jan 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.
Weakness: CWE-310
Which versions are affected by CVE-2015-0204?
It affects 1 product.
Products include Openssl Openssl.
How do I fix CVE-2015-0204?
Upgrade to a fixed version.
Is CVE-2015-0204 being exploited?
There is no known exploitation of CVE-2015-0204 in the wild and no public exploit code.
Public exploit code: 5 proofs of concept on GitHub.
Other vulnerabilities in Openssl Openssl
Sources
Also known as DEBIAN-CVE-2015-0204, GHSA-ff55-77ff-xv8x, UBUNTU-CVE-2015-0204.