{"id":"CVE-2015-0204","title":"The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by off…","summary":"The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by off…","severity":"medium","cvss":4.3,"cvssVector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","cwe":["CWE-310"],"vendor":"openssl","product":"openssl","affected":["openssl <= 0.9.8zc","openssl = 1.0.0a","openssl = 1.0.0b","openssl = 1.0.0c","openssl = 1.0.0d","openssl = 1.0.0e","openssl = 1.0.0f","openssl = 1.0.0g","openssl = 1.0.0h","openssl = 1.0.0i","openssl = 1.0.0j","openssl = 1.0.0k","openssl = 1.0.0l","openssl = 1.0.0m","openssl = 1.0.0n","openssl = 1.0.0o","openssl = 1.0.1a","openssl = 1.0.1b","openssl = 1.0.1c","openssl = 1.0.1d","openssl = 1.0.1e","openssl = 1.0.1f","openssl = 1.0.1g","openssl = 1.0.1h","openssl = 1.0.1i","openssl = 1.0.1j"],"published":"2015-01-09","updated":"2026-10-14","sourceUpdated":"2026-10-14T22:17:01.677","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2015-0204","references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","label":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","label":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144043644216842&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","label":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","label":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","label":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","label":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0849.html","label":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","label":"secalert@redhat.com"},{"url":"http://support.novell.com/security/cve/CVE-2015-0204.html","label":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","label":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21883640","label":"secalert@redhat.com"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960769","label":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3125","label":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","label":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","label":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","label":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","label":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/71936","label":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/91787","label":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033378","label":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","label":"secalert@redhat.com"},{"url":"https://bto.bluecoat.com/security-advisory/sa91","label":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99707","label":"secalert@redhat.com"},{"url":"https://freakattack.com/","label":"secalert@redhat.com"},{"url":"https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0","label":"secalert@redhat.com"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","label":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","label":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","label":"secalert@redhat.com"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","label":"secalert@redhat.com"},{"url":"https://security.gentoo.org/glsa/201503-11","label":"secalert@redhat.com"},{"url":"https://support.apple.com/HT204659","label":"secalert@redhat.com"},{"url":"https://support.citrix.com/article/CTX216642","label":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","label":"secalert@redhat.com"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","label":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10679","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496179803395&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142496289803847&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142720981827617&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=142895206924048&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143213830203296&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=143748090628601&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144043644216842&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050155601375&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050205101530&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050254401665&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144050297101809&w=2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0066.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0800.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0849.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1650.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/security/cve/CVE-2015-0204.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21883640","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-304.ibm.com/support/docview.wss?uid=swg21960769","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3125","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:019","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:062","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:063","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/71936","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/91787","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033378","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa88","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bto.bluecoat.com/security-advisory/sa91","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99707","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://freakattack.com/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/openssl/openssl/commit/ce325c60c74b0fa784f5872404b722e120e5cab0","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10102","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10108","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10110","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-11","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT204659","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.citrix.com/article/CTX216642","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150108.txt","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv_20150319.txt","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available","cve.org"],"epss":0.98685,"epssPercentile":0.99924,"exploits":{"github":5,"githubRepos":["https://github.com/felmoltor/FreakVulnChecker","https://github.com/scottjpack/Freak-Scanner","https://github.com/AbhishekGhosh/FREAK-Attack-CVE-2015-0204-Testing-Script"],"checkedAt":"2026-10-26T21:40:19.744Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T23:00:01.981Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-14T21:04:56.163876Z"},"slug":"CVE-2015-0204","body":"## Overview\n\nThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the \"FREAK\" issue.  NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.\n\n## Affected\n\n- `openssl <= 0.9.8zc`\n- `openssl = 1.0.0a`\n- `openssl = 1.0.0b`\n- `openssl = 1.0.0c`\n- `openssl = 1.0.0d`\n- `openssl = 1.0.0e`\n- `openssl = 1.0.0f`\n- `openssl = 1.0.0g`\n- `openssl = 1.0.0h`\n- `openssl = 1.0.0i`\n- `openssl = 1.0.0j`\n- `openssl = 1.0.0k`\n- `openssl = 1.0.0l`\n- `openssl = 1.0.0m`\n- `openssl = 1.0.0n`\n- `openssl = 1.0.0o`\n- `openssl = 1.0.1a`\n- `openssl = 1.0.1b`\n- `openssl = 1.0.1c`\n- `openssl = 1.0.1d`\n- `openssl = 1.0.1e`\n- `openssl = 1.0.1f`\n- `openssl = 1.0.1g`\n- `openssl = 1.0.1h`\n- `openssl = 1.0.1i`\n- `openssl = 1.0.1j`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":55,"depthScoreParts":{"impact":23.7,"likelihood":19.7,"exploitation":12,"ransomware":0},"changes":[]}