CVE 설명

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the "FREAK" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.

CVE 정보

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

EPSS First.org

언급된 제품

구성 0

Openssl>>Openssl >> Version 까지 (포함) 0.9.8zc

Openssl>>Openssl >> Version 1.0.0a

Openssl>>Openssl >> Version 1.0.0b

Openssl>>Openssl >> Version 1.0.0c

Openssl>>Openssl >> Version 1.0.0d

Openssl>>Openssl >> Version 1.0.0e

Openssl>>Openssl >> Version 1.0.0f

Openssl>>Openssl >> Version 1.0.0g

Openssl>>Openssl >> Version 1.0.0h

Openssl>>Openssl >> Version 1.0.0i

Openssl>>Openssl >> Version 1.0.0j

Openssl>>Openssl >> Version 1.0.0k

Openssl>>Openssl >> Version 1.0.0l

Openssl>>Openssl >> Version 1.0.0m

Openssl>>Openssl >> Version 1.0.0n

Openssl>>Openssl >> Version 1.0.0o

Openssl>>Openssl >> Version 1.0.1a

Openssl>>Openssl >> Version 1.0.1b

Openssl>>Openssl >> Version 1.0.1c

Openssl>>Openssl >> Version 1.0.1d

Openssl>>Openssl >> Version 1.0.1e

Openssl>>Openssl >> Version 1.0.1f

Openssl>>Openssl >> Version 1.0.1g

Openssl>>Openssl >> Version 1.0.1h

Openssl>>Openssl >> Version 1.0.1i

Openssl>>Openssl >> Version 1.0.1j

참고 자료

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

https://kc.mcafee.com/corporate/index?page=content&id=SB10110
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=142895206924048&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html
Tags : vendor-advisory, x_refsource_SUSE

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl
Tags : vendor-advisory, x_refsource_CISCO

http://marc.info/?l=bugtraq&m=142720981827617&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.securityfocus.com/bid/71936
Tags : vdb-entry, x_refsource_BID

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=144050155601375&w=2
Tags : vendor-advisory, x_refsource_HP

https://support.apple.com/HT204659
Tags : x_refsource_CONFIRM

https://www.openssl.org/news/secadv_20150319.txt
Tags : x_refsource_CONFIRM

http://www-304.ibm.com/support/docview.wss?uid=swg21960769
Tags : x_refsource_CONFIRM

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Tags : x_refsource_CONFIRM

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=143748090628601&w=2
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=144043644216842&w=2
Tags : vendor-advisory, x_refsource_HP

http://rhn.redhat.com/errata/RHSA-2015-0849.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Tags : x_refsource_CONFIRM

http://www.securitytracker.com/id/1033378
Tags : vdb-entry, x_refsource_SECTRACK

http://marc.info/?l=bugtraq&m=142721102728110&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
Tags : vendor-advisory, x_refsource_SUSE

https://www.openssl.org/news/secadv_20150108.txt
Tags : x_refsource_CONFIRM

http://www.mandriva.com/security/advisories?name=MDVSA-2015:019
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
Tags : vendor-advisory, x_refsource_SUSE

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679
Tags : x_refsource_CONFIRM

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
Tags : x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/99707
Tags : vdb-entry, x_refsource_XF

http://rhn.redhat.com/errata/RHSA-2015-0066.html
Tags : vendor-advisory, x_refsource_REDHAT

http://support.novell.com/security/cve/CVE-2015-0204.html
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=143213830203296&w=2
Tags : vendor-advisory, x_refsource_HP

https://freakattack.com/
Tags : x_refsource_MISC

http://www.mandriva.com/security/advisories?name=MDVSA-2015:063
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www-01.ibm.com/support/docview.wss?uid=swg21883640
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=142496289803847&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Tags : x_refsource_CONFIRM

https://kc.mcafee.com/corporate/index?page=content&id=SB10108
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

https://kc.mcafee.com/corporate/index?page=content&id=SB10102
Tags : x_refsource_CONFIRM

https://bto.bluecoat.com/security-advisory/sa91
Tags : x_refsource_CONFIRM

https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0
Tags : x_refsource_CONFIRM

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
Tags : vendor-advisory, x_refsource_SUSE

http://marc.info/?l=bugtraq&m=144050297101809&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.securityfocus.com/bid/91787
Tags : vdb-entry, x_refsource_BID

http://rhn.redhat.com/errata/RHSA-2016-1650.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
Tags : x_refsource_CONFIRM

http://rhn.redhat.com/errata/RHSA-2015-0800.html
Tags : vendor-advisory, x_refsource_REDHAT

http://marc.info/?l=bugtraq&m=143213830203296&w=2
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=144050205101530&w=2
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=142496179803395&w=2
Tags : vendor-advisory, x_refsource_HP

http://marc.info/?l=bugtraq&m=142720981827617&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.mandriva.com/security/advisories?name=MDVSA-2015:062
Tags : vendor-advisory, x_refsource_MANDRIVA

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html
Tags : vendor-advisory, x_refsource_SUSE

https://support.citrix.com/article/CTX216642
Tags : x_refsource_CONFIRM

http://marc.info/?l=bugtraq&m=144050254401665&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html
Tags : vendor-advisory, x_refsource_SUSE

http://marc.info/?l=bugtraq&m=142496289803847&w=2
Tags : vendor-advisory, x_refsource_HP

https://bto.bluecoat.com/security-advisory/sa88
Tags : x_refsource_CONFIRM

https://security.gentoo.org/glsa/201503-11
Tags : vendor-advisory, x_refsource_GENTOO

http://www.debian.org/security/2015/dsa-3125
Tags : vendor-advisory, x_refsource_DEBIAN

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
Tags : vendor-advisory, x_refsource_SUSE

날짜	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	63.34%	–	–
2023-03-12	–	–	–	96.85%	–
2023-05-14	–	–	–	96.67%	–
2023-06-25	–	–	–	96.76%	–
2023-07-09	–	–	–	96.92%	–
2023-09-17	–	–	–	96.68%	–
2023-09-24	–	–	–	96.68%	–
2023-10-29	–	–	–	96.45%	–
2023-12-17	–	–	–	95.39%	–
2024-03-31	–	–	–	94.83%	–
2024-06-02	–	–	–	94.83%	–
2024-08-25	–	–	–	94.88%	–
2025-01-19	–	–	–	94.88%	–
2025-03-18	–	–	–	–	92.87%
2025-03-30	–	–	–	–	92.43%
2025-04-08	–	–	–	–	92.47%
2025-04-22	–	–	–	–	92.43%
2025-05-01	–	–	–	–	89.53%
2025-05-04	–	–	–	–	92.43%
2025-06-01	–	–	–	–	89.53%
2025-06-04	–	–	–	–	92.43%
2025-06-23	–	–	–	–	92.47%
2025-07-01	–	–	–	–	89.62%
2025-07-04	–	–	–	–	92.47%
2025-07-06	–	–	–	–	92.43%
2025-07-16	–	–	–	–	92.47%
2025-07-29	–	–	–	–	92.43%
2025-07-30	–	–	–	–	91.91%
2025-08-01	–	–	–	–	88.52%
2025-08-04	–	–	–	–	91.91%
2025-08-19	–	–	–	–	91.96%
2025-09-08	–	–	–	–	91.91%
2025-10-01	–	–	–	–	89.53%
2025-10-04	–	–	–	–	92.43%
2025-10-17	–	–	–	–	92.47%
2025-10-22	–	–	–	–	92.43%
2025-10-27	–	–	–	–	91.91%
2025-10-28	–	–	–	–	92.43%
2025-11-01	–	–	–	–	89.53%
2025-11-04	–	–	–	–	92.43%
2025-11-11	–	–	–	–	91.95%
2025-11-14	–	–	–	–	91.99%
2025-11-25	–	–	–	–	92.47%
2025-12-01	–	–	–	–	89.62%
2025-12-03	–	–	–	–	89.53%
2025-12-04	–	–	–	–	91.95%
2025-12-18	–	–	–	–	91.99%
2025-12-27	–	–	–	–	91.36%
2025-12-28	–	–	–	–	91.99%
2025-12-31	–	–	–	–	92.47%
2026-01-01	–	–	–	–	89.62%
2026-01-04	–	–	–	–	92.47%
2026-01-05	–	–	–	–	92.43%
2026-03-01	–	–	–	–	90.49%
2026-03-08	–	–	–	–	92.43%
2026-05-10	–	–	–	–	91.99%
2026-05-17	–	–	–	–	91.95%

날짜	백분위수
2022-02-06	99%
2023-03-12	99%
2023-05-14	99%
2023-06-25	99%
2023-07-09	1%
2023-09-17	99%
2023-09-24	1%
2023-10-29	99%
2023-12-17	99%
2024-03-31	99%
2024-06-02	99%
2024-08-25	99%
2025-01-19	99%
2025-03-18	1%
2025-03-30	1%
2025-04-08	1%
2025-04-22	1%
2025-05-01	1%
2025-05-04	1%
2025-06-01	1%
2025-06-04	1%
2025-06-23	1%
2025-07-01	1%
2025-07-04	1%
2025-07-06	1%
2025-07-16	1%
2025-07-29	1%
2025-07-30	1%
2025-08-01	99%
2025-08-04	1%
2025-08-19	1%
2025-09-08	1%
2025-10-01	1%
2025-10-04	1%
2025-10-17	1%
2025-10-22	1%
2025-10-27	1%
2025-10-28	1%
2025-11-01	1%
2025-11-04	1%
2025-11-11	1%
2025-11-14	1%
2025-11-25	1%
2025-12-01	1%
2025-12-03	1%
2025-12-04	1%
2025-12-18	1%
2025-12-27	1%
2025-12-28	1%
2025-12-31	1%
2026-01-01	1%
2026-01-04	1%
2026-01-05	1%
2026-03-01	1%
2026-03-08	1%
2026-05-10	1%
2026-05-17	1%

CVE-2015-0204

CVE 설명

CVE 정보

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

언급된 제품

구성 0

참고 자료

CVE-2015-0204 : 상세 정보

CVE-2015-0204

CVE 설명

CVE 정보

관련 약점

메트릭

EPSS

EPSS 점수

EPSS 백분위수

언급된 제품

구성 0

참고 자료