CVE-2015-5229

Key facts

CVSS score

7.5 (v3.0)

Severity

HIGH

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness (CWE)

CWE-17

EPSS score

2.2% (82th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2015-5225)

Published

April 8, 2016

NVD last modified

June 17, 2026

Status

Modified

Affected products

• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux desktop
• redhat / enterprise linux hpc node
• redhat / enterprise linux hpc node eus
• redhat / enterprise linux server
• redhat / enterprise linux server aus
• redhat / enterprise linux server eus
• redhat / enterprise linux workstation

Certified products that may be affected

7 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 7 NSS Cryptographic Module - Red Hat®, Inc. - FIPS 140 4498 - historical
• Red Hat Enterprise Linux 7 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 3939 - historical
• Red Hat Enterprise Linux 7 OpenSSH Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 3891 - historical
• Red Hat Enterprise Linux 7 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 3892 - historical
• Red Hat Enterprise Linux 7 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 3867 - historical

See all 7 in the Security Certifications Explorer.

References

• http://rhn.redhat.com/errata/RHSA-2016-0176.html(Vendor Advisory)
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
• http://www.securityfocus.com/bid/84172
• https://bugzilla.redhat.com/show_bug.cgi?id=1246713(Vendor Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=1256285(Vendor Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=1293976(Vendor Advisory)
• https://kc.mcafee.com/corporate/index?page=content&id=SB10150