CVE-2015-0501

Key facts

CVSS score

5.7 (v2.0)

Severity

MEDIUM

CVSS vector

AV:N/AC:M/Au:M/C:N/I:N/A:C

EPSS score

10.3% (96th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2015-0514)

Published

April 16, 2015

NVD last modified

June 17, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• debian / debian linux
• juniper / junos space
• mariadb / mariadb
• oracle / mysql
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server aus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux server tus
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• suse / linux enterprise desktop
• suse / linux enterprise server
• suse / linux enterprise server
• suse / linux enterprise software development kit

Certified products that may be affected

5 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Junos Space Network Management Platform, with or without Network Director and with or without Security Director in Virtual Appliance - Juniper Networks, Inc. - FIPS 140 3779 - historical
• Red Hat Enterprise Linux 7.6 - Red Hat, Inc. - Common Criteria CCEVS-VR-VID-11039-2020 - archived
• SUSE Linux Enterprise Server 11 Service Pack 2 on IBM System z - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0852-2013 - archived
• SUSE Linux Enterprise Server 11 Service Pack 2 including KVM virtualization - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0787-2013 - archived
• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical

References

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698(Third Party Advisory)
• http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html(Mailing List, Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-1628.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-1629.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-1647.html(Third Party Advisory)
• http://rhn.redhat.com/errata/RHSA-2015-1665.html(Third Party Advisory)
• http://www.debian.org/security/2015/dsa-3229(Third Party Advisory)
• http://www.debian.org/security/2015/dsa-3311(Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2015:227(Broken Link, Third Party Advisory)
• http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html(Vendor Advisory)
• http://www.securitytracker.com/id/1032121(Broken Link, Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-2575-1(Third Party Advisory)
• https://mariadb.com/kb/en/mariadb/mariadb-5543-release-notes/(Release Notes, Third Party Advisory)
• https://security.gentoo.org/glsa/201507-19(Third Party Advisory)