The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 5.3 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 5.3.12 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 6.1.8 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1.9 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 7.1.2 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1.3 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.2 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Jun 12, 2015 |
| Apple Osx Adminframework | — | Upgrade macOS to the latest versionApply OS X security update 2015-005 | Aug 28, 2015 | May 20, 2015 |
| Apple Osx Coretls | — | Upgrade macOS to the latest version | Mar 29, 2016 | May 20, 2015 |
| Centos_linux | — | Upgrade nss-util-develUpgrade java-1.6.0-openjdk-develUpgrade openssl-develUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-srcUpgrade nss-toolsUpgrade nss-develUpgrade openssl-libsUpgrade nss-utilUpgrade java-1.6.0-openjdkUpgrade nss-sysinitUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade nssUpgrade openssl-staticUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.6.0-openjdk-javadocUpgrade opensslUpgrade java-1.8.0-openjdk-javadocUpgrade nss-pkcs11-develUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-develUpgrade openssl-perl | Dec 1, 2016 | May 20, 2015 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Dec 16, 2020 | May 21, 2015 |
| Debian | — | Upgrade openjdk-6Upgrade openjdk-7Upgrade opensslUpgrade iceweaselUpgrade nssUpgrade icedove | Mar 31, 2017 | May 20, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade mingw32-opensslUpgrade libresslUpgrade opensslUpgrade firefox-esrUpgrade linux-firefoxUpgrade FreeBSDUpgrade seamonkeyUpgrade linux-c6-opensslUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade libxul | Dec 10, 2025 | Jul 16, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/nss.Upgrade www-client/firefox.Upgrade dev-libs/openssl.Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nspr.Upgrade www-client/firefox-bin. | Oct 30, 2017 | May 20, 2015 |
| Hp Ilo | — | Upgrade HP iLO 4 to version 2.30Upgrade HP iLO 3 to version 1.87Upgrade HP iLO 2 to version 2.33 | Aug 1, 2018 | May 20, 2015 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 26, 2016 | May 20, 2015 |
| Hpux | — | Update openssl.OPENSSL-LIB to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-SRC to the latest version | Aug 11, 2017 | May 20, 2015 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | May 21, 2015 | May 21, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl098e | Dec 4, 2019 | May 21, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl098e | Dec 18, 2019 | May 21, 2015 |
| Ibm Aix | — | Apply the fix or workaround for sendmail_advisory2Apply the fix or workaround for openssl_advisory14Apply the fix or workaround for openssl_advisory17Apply the fix or workaround for java_july2015_advisory | Nov 30, 2017 | May 20, 2015 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | May 21, 2015 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 14, 2015 | May 20, 2015 |
| Mfsa2015 70 | — | Upgrade to Mozilla Firefox version 39.0Upgrade to Mozilla Firefox ESR version 38.1Upgrade to Mozilla Firefox ESR version 31.8 | Jul 8, 2015 | May 20, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.35.0 | Oct 22, 2015 | May 20, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 38.1Upgrade to Mozilla Thunderbird version 31.8 | Sep 14, 2015 | May 20, 2015 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.6-0.175.2.12.0.6.0 on Solaris 11.2Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.1.16-0.175.2.12.0.6.0 on Solaris 11.2Upgrade mail/thunderbird to version 31.8.0-0.175.3.5.0.5.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 31.8.0-0.175.3.5.0.5.0 on Solaris 11.3 | May 29, 2017 | May 20, 2015 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-develUpgrade nss-toolsUpgrade nss-sysinitUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-develUpgrade openssl-staticUpgrade openssl-develUpgrade java-1.8.0-openjdkUpgrade nssUpgrade nss-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade nss-pkcs11-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-accessibilityUpgrade opensslUpgrade java-1.8.0-openjdk-accessibilityUpgrade openssl-perlUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-develUpgrade nss-utilUpgrade java-1.8.0-openjdk-javadocUpgrade openssl-libsUpgrade nss-util-develUpgrade java-1.7.0-openjdk-javadoc | May 13, 2016 | May 20, 2015 |
| Panos | — | Update PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 6.1 to the latest workaround for your deviceUpgrade PAN-OS 7.0 to the latest versionUpdate PAN-OS 5.0 to the latest workaround for your deviceUpdate PAN-OS 5.1 to the latest workaround for your deviceUpdate PAN-OS 6.0 to the latest workaround for your device | Oct 12, 2016 | May 20, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 7.1R22.2Update Pulse Connect Secure to version 8.1R6Update Pulse Connect Secure to version 8.1R5Update Pulse Connect Secure to version 8.0R13Update Pulse Connect Secure to version 7.4R13.5 | Oct 28, 2020 | May 21, 2015 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 20, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2015 |
| Ssh | — | Disable SSH support for ssh-diffie-hellman-group1-sha1 | Mar 31, 2020 | May 20, 2015 |
| Suse | — | Upgrade apache2-mod_security2Upgrade openldap2-back-sqlUpgrade libfreebl3-debuginfo-x86Upgrade mysql-community-server-tools-debuginfoUpgrade libmysql55client18-32bitUpgrade java-1_7_0-ibmUpgrade libgnutls26-32bitUpgrade mariadb-tools-debuginfoUpgrade mysql-community-server-errormessagesUpgrade libldap-openssl1-2_4-2-x86Upgrade mozilla-nss-develUpgrade apache2Upgrade java-1_7_0-openjdk-bootstrap-debugsourceUpgrade mysql-community-server-test-debuginfoUpgrade mysql-community-server-bench-debuginfoUpgrade libmysqlclient18-debuginfoUpgrade mozilla-nss-certsUpgrade mozilla-nss-debuginfoUpgrade java-1_7_0-openjdk-headless-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade libopenssl1-develUpgrade java-1_8_0-openjdk-headless-debuginfoUpgrade mysql-community-serverUpgrade java-1_6_0-ibm-alsaUpgrade openssl1Upgrade libcrypto34-32bitUpgrade mozilla-nss-certs-debuginfoUpgrade libldap-openssl1-2_4-2Upgrade apache2-debugsourceUpgrade compat-openssl097g-32bitUpgrade apache2-debuginfoUpgrade openldap2-back-metaUpgrade mozilla-nspr-32bitUpgrade java-1_7_0-openjdk-debugsourceUpgrade openldap2-clientUpgrade libmysqlclient15-x86Upgrade socat-debugsourceUpgrade opensslUpgrade openldap2-develUpgrade java-1_8_0-openjdk-debuginfoUpgrade libsoftokn3Upgrade libldap-2_4-2-debuginfoUpgrade apache2-example-pagesUpgrade apache2-event-debuginfoUpgrade apache2-mod_jkUpgrade apache2-develUpgrade libcrypto34-debuginfo-32bitUpgrade libmysql56client18-debuginfoUpgrade mysqlUpgrade java-1_8_0-openjdk-develUpgrade mozilla-nspr-debuginfo-32bitUpgrade MozillaThunderbird-debugsourceUpgrade libfreebl3-debuginfoUpgrade mozilla-nss-certs-x86Upgrade apache2-worker-debuginfoUpgrade openldap2-debugsourceUpgrade libressl-devel-32bitUpgrade java-1_7_0-openjdk-demo-debuginfoUpgrade compat-openssl097gUpgrade mariadbUpgrade compat-openssl098Upgrade libmysql55client_r18-32bitUpgrade libressl-debugsourceUpgrade openssl-docUpgrade libmysql56client_r18-32bitUpgrade java-1_7_0-openjdk-devel-debuginfoUpgrade socatUpgrade libtls4-debuginfoUpgrade java-1_7_0-openjdkUpgrade apache2-mod_auth_kerbUpgrade java-1_8_0-openjdk-accessibilityUpgrade mariadb-debuginfoUpgrade mysql-community-server-benchUpgrade mariadb-errormessagesUpgrade openssl-develUpgrade libopenssl0_9_8-x86Upgrade java-1_7_1-ibm-develUpgrade libopenssl1_0_0-x86Upgrade mariadb-testUpgrade MozillaThunderbird-translations-otherUpgrade java-1_6_0-ibm-pluginUpgrade mozilla-nss-sysinit-x86Upgrade mysql-MaxUpgrade libresslUpgrade mozilla-nss-toolsUpgrade MozillaFirefox-translations-otherUpgrade java-1_7_0-openjdk-demoUpgrade libressl-devel-docUpgrade mozilla-nss-debugsourceUpgrade java-1_6_0-ibm-jdbcUpgrade openssh-fipsUpgrade java-1_7_1-ibm-pluginUpgrade libopenssl1_0_0-32bitUpgrade openssl-debuginfoUpgrade openldap2-client-openssl1Upgrade libssl33Upgrade openldap2-docUpgrade libopenssl0_9_8Upgrade libopenssl1_0_0-hmacUpgrade libgnutls-develUpgrade libopenssl1_0_0Upgrade openldap2-debuginfoUpgrade libsoftokn3-debuginfo-x86Upgrade libopenssl1_0_0-debuginfo-32bitUpgrade mozilla-nss-tools-debuginfoUpgrade mysql-community-server-debuginfoUpgrade mysql-community-server-debugsourceUpgrade libldap-2_4-2Upgrade libssl33-debuginfo-32bitUpgrade mozilla-nss-32bitUpgrade libmysql55client18Upgrade libsoftokn3-hmacUpgrade java-1_7_0-ibm-alsaUpgrade libopenssl1_0_0-debuginfoUpgrade openldap2-devel-staticUpgrade MozillaFirefoxUpgrade libmysqld-develUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-x86Upgrade mariadb-benchUpgrade mariadb-test-debuginfoUpgrade libmysqlclient15-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade libldap-2_4-2-32bitUpgrade MozillaThunderbirdUpgrade libfreebl3-x86Upgrade libmysqlclient18Upgrade compat-libldap-2_3-0Upgrade mariadb-clientUpgrade libcrypto34-debuginfoUpgrade libmysqlclient_r15-32bitUpgrade apache2-prefork-debuginfoUpgrade firefox-libstdc++6Upgrade java-1_7_0-openjdk-srcUpgrade libmysqlclient18-debuginfo-32bitUpgrade java-1_7_0-ibm-pluginUpgrade mariadb-client-debuginfoUpgrade openssl-devel-32bitUpgrade mysql-toolsUpgrade MozillaFirefox-develUpgrade libgnutls26Upgrade libopenssl-develUpgrade java-1_7_0-openjdk-bootstrapUpgrade java-1_7_1-ibm-alsaUpgrade openssh-helpersUpgrade apache2-docUpgrade libopenssl-devel-32bitUpgrade libldap-2_4-2-x86Upgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-32bitUpgrade firefox-gcc47Upgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mariadb-debugsourceUpgrade MozillaFirefox-debugsourceUpgrade libfreebl3-32bitUpgrade MozillaFirefox-debuginfoUpgrade mariadb-bench-debuginfoUpgrade MozillaThunderbird-translations-commonUpgrade libopenssl1_0_0-hmac-32bitUpgrade libfreebl3-debuginfo-32bitUpgrade libmysqld18-debuginfoUpgrade libgnutls-extra-develUpgrade libssl33-debuginfoUpgrade libmysqlclient_r18Upgrade java-1_7_1-ibm-jdbcUpgrade mozilla-nss-certs-32bitUpgrade libmysqlclient-develUpgrade java-1_7_1-ibmUpgrade openldap2Upgrade libsoftokn3-debuginfoUpgrade libmysqlclient_r15Upgrade java-1_8_0-openjdk-demo-debuginfoUpgrade libssl33-32bitUpgrade libmysql55client_r18Upgrade mozilla-nss-debuginfo-32bitUpgrade libmysql56client18Upgrade mariadb-toolsUpgrade java-1_8_0-openjdk-demoUpgrade libressl-debuginfoUpgrade libtls4Upgrade openssh-askpass-gnomeUpgrade mozilla-nss-debuginfo-x86Upgrade java-1_7_0-ibm-jdbcUpgrade MozillaThunderbird-debuginfoUpgrade libmysqlclient18-32bitUpgrade libmysql56client18-debuginfo-32bitUpgrade java-1_7_0-openjdk-bootstrap-headlessUpgrade mozilla-nspr-debugsourceUpgrade firefox-libgcc_s1Upgrade java-1_7_0-openjdk-bootstrap-devel-debuginfoUpgrade mozillafirefox-buildsymbolsUpgrade libgnutls-extra26Upgrade openldap2-client-debuginfoUpgrade mozilla-nspr-x86Upgrade java-1_7_0-openjdk-bootstrap-debuginfoUpgrade java-1_7_0-openjdk-javadocUpgrade java-1_7_0-openjdk-accessibilityUpgrade gnutlsUpgrade openssl-debugsourceUpgrade mysql-community-server-clientUpgrade MozillaThunderbird-develUpgrade libldap-openssl1-2_4-2-32bitUpgrade mysql-community-server-toolsUpgrade libtls4-debuginfo-32bitUpgrade mozilla-nspr-debuginfo-x86Upgrade mozilla-nss-sysinit-debuginfoUpgrade libmysql56client18-32bitUpgrade libsoftokn3-hmac-32bitUpgrade mozilla-nspr-debuginfoUpgrade MozillaFirefox-translationsUpgrade java-1_7_0-openjdk-develUpgrade libcrypto34Upgrade libopenssl0_9_8-hmac-32bitUpgrade openldap2-back-meta-debuginfoUpgrade libmysqlclient15Upgrade openldap2-back-perl-debuginfoUpgrade apache2-preforkUpgrade libressl-develUpgrade opensshUpgrade libmysql55client18-x86Upgrade java-1_6_0-ibm-fontsUpgrade libsoftokn3-debuginfo-32bitUpgrade compat-libldap-2_3-0-debuginfoUpgrade mozilla-nspr-develUpgrade java-1_8_0-openjdk-headlessUpgrade libldap-2_4-2-debuginfo-32bitUpgrade libmysqld18Upgrade MozillaFirefox-branding-SLEDUpgrade apache2-utilsUpgrade java-1_7_0-ibm-develUpgrade java-1_6_0-ibmUpgrade openldap2-back-sql-debuginfoUpgrade openldap2-back-perlUpgrade java-1_8_0-openjdk-srcUpgrade mysql-community-server-testUpgrade apache2-utils-debuginfoUpgrade socat-debuginfoUpgrade libopenssl0_9_8-hmacUpgrade mozilla-nssUpgrade java-1_8_0-openjdk-javadocUpgrade libtls4-32bitUpgrade libfreebl3-hmacUpgrade MozillaFirefox-translations-commonUpgrade java-1_7_0-openjdk-bootstrap-develUpgrade libmysql56client_r18Upgrade apache2-workerUpgrade java-1_7_0-openjdk-debuginfoUpgrade libfreebl3Upgrade java-1_8_0-openjdk-debugsourceUpgrade libmysql55client_r18-x86Upgrade mozillafirefox-branding-upstreamUpgrade openldap2-devel-32bitUpgrade mozilla-nsprUpgrade libmysqlclient_r15-x86Upgrade libgnutls26-x86Upgrade libmysqlclient_r18-32bitUpgrade openssl1-docUpgrade openssl-32bitUpgrade libopenssl0_9_8-32bitUpgrade java-1_7_0-openjdk-bootstrap-headless-debuginfoUpgrade mysql-community-server-client-debuginfoUpgrade mozilla-nss-certs-debuginfo-x86Upgrade apache2-eventUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_8_0-openjdkUpgrade openssh-askpassUpgrade java-1_6_0-ibm-develUpgrade libsoftokn3-x86Upgrade openldap2-client-debugsourceUpgrade libfreebl3-hmac-32bitUpgrade mysql-client | May 18, 2016 | May 20, 2015 |
| Tls Dhe Export Ciphers | — | Disable TLS/SSL support for export ciphers | Jun 10, 2015 | May 20, 2015 |
| Ubuntu | — | Upgrade openjdk-7-jreUpgrade openjdk-6-jreUpgrade openjdk-7-jre-zeroUpgrade firefoxUpgrade icedtea-6-jre-cacaoUpgrade openjdk-6-sourceUpgrade openjdk-6-jre-libUpgrade openjdk-7-jre-headlessUpgrade thunderbirdUpgrade openjdk-6-jre-headlessUpgrade icedtea-7-jre-jamvmUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-jdkUpgrade openjdk-7-jdkUpgrade openjdk-7-jre-libUpgrade icedtea-6-jre-jamvm | Nov 8, 2024 | May 21, 2015 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub