CVE-2015-8980

Key facts

CVSS score

9.8 (v3.1)

Severity

CRITICAL

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-20

EPSS score

6.7% (94th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2015-8834)

Published

November 4, 2019

NVD last modified

June 17, 2026

Status

Modified

Affected products

• fedoraproject / fedora
• opensuse / leap
• opensuse / leap
• php-gettext project / php-gettext
• redhat / enterprise linux

Certified products that may be affected

7 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux libgcrypt Cryptographic Module v4.0 [1] and Red Hat Enterprise Linux libgcrypt Cryptographic Module v5.0 [2] - Red Hat®, Inc. - FIPS 140 2657 - historical
• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
• Red Hat Enterprise Linux 5 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 1385 - historical
• Red Hat Enterprise Linux 5 OpenSwan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1386 - historical
• Red Hat Enterprise Linux 5 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 1387 - historical

See all 7 in the Security Certifications Explorer.

References

• http://lists.opensuse.org/opensuse-updates/2017-02/msg00015.html(Mailing List, Third Party Advisory)
• http://seclists.org/fulldisclosure/2016/Aug/76(Exploit, Mailing List, Third Party Advisory)
• http://www.openwall.com/lists/oss-security/2017/01/18/4(Mailing List, Third Party Advisory)
• http://www.securityfocus.com/bid/95754(Third Party Advisory, VDB Entry)
• https://bugzilla.redhat.com/show_bug.cgi?id=1367462(Issue Tracking, Third Party Advisory)
• https://launchpad.net/php-gettext/trunk/1.0.12(Release Notes, Third Party Advisory)
• https://lwn.net/Alerts/708838/(Mailing List, Third Party Advisory)