CVE-2015-2774 : Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when termin

Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).

Published 2016-04-07 21:59:00

Updated 2023-02-21 19:09:49

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2015-2774

Oracle » Solaris » Version: 11.2
cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*
Matching versions
Opensuse » Opensuse » Version: 13.2
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Matching versions
Erlang » Erlang/otp
Versions up to, including, (<=) 18.0
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-2774

EPSS FAQ

0.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-2774

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2015-2774

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-2774

http://lists.opensuse.org/opensuse-updates/2016-02/msg00124.html

openSUSE-SU-2016:0523-1: moderate: Security update for erlang
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Oracle Solaris Third Party Bulletin - April 2015
Third Party Advisory

CVEs referencing this url
https://web.archive.org/web/20150905124006/http://www.erlang.org/news/85

Erlang Programming Language [ANN] Erlang/OTP 18.0-rc1 is available for testing.
Release Notes
http://www.securityfocus.com/bid/73398

Erlang/OTP CVE-2015-2774 Man In The Middle Information Disclosure Vulnerability
http://openwall.com/lists/oss-security/2015/03/27/6

oss-security - CVE request: Erlang POODLE TLS vulnerability
Third Party Advisory
https://www.imperialviolet.org/2014/12/08/poodleagain.html

ImperialViolet - The POODLE bites again
Technical Description

CVEs referencing this url
https://usn.ubuntu.com/3571-1/

USN-3571-1: Erlang vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://openwall.com/lists/oss-security/2015/03/27/9

oss-security - Re: CVE request: Erlang POODLE TLS vulnerability

Jump to

Vulnerability Details : CVE-2015-2774

Products affected by CVE-2015-2774

Exploit prediction scoring system (EPSS) score for CVE-2015-2774

CVSS scores for CVE-2015-2774

CWE ids for CVE-2015-2774

References for CVE-2015-2774