CVE-2015-0382

Key facts

CVSS score

4.3 (v2.0)

Severity

MEDIUM

CVSS vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS score

10.1% (96th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2015-0395)

Published

January 21, 2015

NVD last modified

June 17, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• fedoraproject / fedora
• mariadb / mariadb
• oracle / communications policy management
• oracle / communications policy management
• oracle / communications policy management
• oracle / communications policy management
• oracle / mysql
• oracle / solaris
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise software development kit
• suse / linux enterprise workstation extension

Certified products that may be affected

3 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 7.6 - Red Hat, Inc. - Common Criteria CCEVS-VR-VID-11039-2020 - archived
• SUSE Linux Enterprise Server Version 12 - SUSE LLC - Common Criteria BSI-DSZ-CC-0962-2016 - archived
• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical

References

• http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149929.html(Mailing List, Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html(Mailing List, Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-0116.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-0117.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-0118.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-1628.html(Third Party Advisory)
• http://secunia.com/advisories/62728(Not Applicable, Third Party Advisory)
• http://secunia.com/advisories/62730(Not Applicable, Third Party Advisory)
• http://secunia.com/advisories/62732(Not Applicable, Third Party Advisory)
• http://www.debian.org/security/2015/dsa-3135(Third Party Advisory)
• http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html(Patch, Vendor Advisory)
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html(Vendor Advisory)
• http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html(Vendor Advisory)
• http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html(Patch, Vendor Advisory)
• http://www.securityfocus.com/bid/72200(Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id/1031581(Broken Link, Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-2480-1(Third Party Advisory)
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100184(Third Party Advisory, VDB Entry)
• https://security.gentoo.org/glsa/201504-05(Third Party Advisory)