cbcvebase.
CVE-2015-2808
published 2015-04-01

CVE-2015-2808: The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which…

PriorityP335low3.7CVSS 3.1
AVNACHPRNUINSUCLINAN
EPSS
73.85%
99.4th percentile
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

Affected

71 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debianopenjdk-8< openjdk-8 8u66-b01-1 (sid)openjdk-8 8u66-b01-1 (sid)
fujitsusparc_enterprise_m3000_firmware>= xcp < xcp_1121xcp_1121
fujitsusparc_enterprise_m4000_firmware>= xcp < xcp_1121xcp_1121
fujitsusparc_enterprise_m5000_firmware>= xcp < xcp_1121xcp_1121
fujitsusparc_enterprise_m8000_firmware>= xcp < xcp_1121xcp_1121
fujitsusparc_enterprise_m9000_firmware>= xcp < xcp_1121xcp_1121
huaweioceanstor_replicationdirector
huaweipolicy_center
huaweipolicy_center
huaweismc2.0
huaweismc2.0
huaweismc2.0
huaweismc2.0
huaweiultravr
ibmcognos_metrics_manager
ibmcognos_metrics_manager
ibmcognos_metrics_manager
ibmcognos_metrics_manager
ibmcognos_metrics_manager
opensuseopensuse

Detection & IOCsextracted from sources · hover to see the quote

  • Detect RC4 cipher suite usage in TLS/SSL traffic; presence of RC4-based cipher suites in ClientHello or ServerHello indicates exposure to the Bar Mitzvah attack (CVE-2015-2808)
  • Monitor for RC4 cipher suite negotiation in TLS handshakes; the attack targets the initial bytes of the RC4 keystream via the Invariance Weakness (L-shape key pattern) which preserves part of the state permutation intact throughout the initialization process, leaking LSBs of the output stream
  • Check jdk.tls.disabledAlgorithms security property in java.security; if RC4 is absent from this list, the JVM is potentially vulnerable to CVE-2015-2808
  • ·This vulnerability is a design flaw in the RC4 algorithm itself, not an implementation bug; patching involves disabling RC4 cipher suites rather than fixing RC4 code
  • ·IBM JDK fix disables all RC4 SSL/TLS cipher suites by default; IBM Java 7+ adds RC4 to jdk.tls.disabledAlgorithms, but IBM Java 5.0 and 6 do not support algorithm-level disabling via that property
  • ·Oracle JDK (7u85, 8u51) removes RC4 from default enabled cipher suites but does NOT add it to jdk.tls.disabledAlgorithms, meaning RC4 can still be re-enabled via setEnabledCipherSuites(); a new jdk.tls.legacyAlgorithms property was introduced to deprioritize RC4 on the server side
  • ·Mitsubishi Electric air conditioning systems (G-150AD, AG-150A-A/J, GB-50AD, GB-50ADA-A/J, EB-50GU-A/J, AE-200/50/EW-50 series, TE/TW-50A) are affected by CVE-2015-2808 in their TLS implementation; no known public exploits but attack complexity is high

CVSS provenance

nvdv3.13.7LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv9.8CRITICAL
vendor_ubuntu9.8CRITICAL
vendor_debian5.0MEDIUM
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.