The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 5.3 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 5.3.12 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 6.1.8 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1.9 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 7.1.2 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1.3 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.2 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Jun 12, 2015 |
| Apple Osx Adminframework | — | Apply OS X security update 2015-005Upgrade macOS to the latest version | Aug 28, 2015 | May 20, 2015 |
| Apple Osx Coretls | — | Upgrade macOS to the latest version | Mar 29, 2016 | May 20, 2015 |
| Centos_linux | — | Upgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade nss-toolsUpgrade openssl-develUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade nss-sysinitUpgrade nssUpgrade openssl-libsUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade nss-util-develUpgrade nss-develUpgrade nss-utilUpgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade openssl-perlUpgrade opensslUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade nss-pkcs11-develUpgrade openssl-staticUpgrade java-1.7.0-openjdk-accessibility | Dec 1, 2016 | May 20, 2015 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Dec 16, 2020 | May 21, 2015 |
| Debian | — | Upgrade openjdk-7Upgrade openjdk-6Upgrade iceweaselUpgrade opensslUpgrade icedoveUpgrade nss | Mar 31, 2017 | May 20, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Freebsd | — | Upgrade linux-c6-opensslUpgrade libxulUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade firefoxUpgrade FreeBSDUpgrade opensslUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade firefox-esrUpgrade mingw32-opensslUpgrade libressl | Dec 10, 2025 | Jul 16, 2015 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr.Upgrade dev-java/oracle-jre-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade dev-libs/openssl.Upgrade dev-java/oracle-jdk-bin.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox. | Oct 30, 2017 | May 20, 2015 |
| Hp Ilo | — | Upgrade HP iLO 3 to version 1.87Upgrade HP iLO 2 to version 2.33Upgrade HP iLO 4 to version 2.30 | Aug 1, 2018 | May 20, 2015 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 26, 2016 | May 20, 2015 |
| Hpux | — | Update openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-LIB to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-PRNG to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate openssl.OPENSSL-CONF to the latest version | Aug 11, 2017 | May 20, 2015 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | May 21, 2015 | May 21, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl098e | Dec 4, 2019 | May 21, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl098e | Dec 18, 2019 | May 21, 2015 |
| Ibm Aix | — | Apply the fix or workaround for java_july2015_advisoryApply the fix or workaround for openssl_advisory14Apply the fix or workaround for openssl_advisory17Apply the fix or workaround for sendmail_advisory2 | Nov 30, 2017 | May 20, 2015 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | May 21, 2015 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 14, 2015 | May 20, 2015 |
| Mfsa2015 70 | — | Upgrade to Mozilla Firefox ESR version 31.8Upgrade to Mozilla Firefox ESR version 38.1Upgrade to Mozilla Firefox version 39.0 | Jul 8, 2015 | May 20, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.35.0 | Oct 22, 2015 | May 20, 2015 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 31.8Upgrade to Mozilla Thunderbird version 38.1 | Sep 14, 2015 | May 20, 2015 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 31.8.0-0.175.3.5.0.5.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 31.8.0-0.175.3.5.0.5.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.6-0.175.2.12.0.6.0 on Solaris 11.2Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.1.16-0.175.2.12.0.6.0 on Solaris 11.2 | May 29, 2017 | May 20, 2015 |
| Oracle_linux | — | Upgrade openssl-develUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-develUpgrade nss-toolsUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-demoUpgrade nssUpgrade openssl-staticUpgrade nss-sysinitUpgrade nss-develUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade opensslUpgrade java-1.7.0-openjdk-develUpgrade nss-utilUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-accessibilityUpgrade openssl-perlUpgrade openssl-libsUpgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headlessUpgrade nss-util-develUpgrade nss-pkcs11-develUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-demo | May 13, 2016 | May 20, 2015 |
| Panos | — | Update PAN-OS 5.0 to the latest workaround for your deviceUpdate PAN-OS 6.1 to the latest workaround for your deviceUpdate PAN-OS 6.0 to the latest workaround for your deviceUpgrade PAN-OS 7.0 to the latest versionUpdate PAN-OS 7.1 to the latest workaround for your deviceUpdate PAN-OS 5.1 to the latest workaround for your device | Oct 12, 2016 | May 20, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 7.1R22.2Update Pulse Connect Secure to version 8.1R6Update Pulse Connect Secure to version 8.0R13Update Pulse Connect Secure to version 7.4R13.5Update Pulse Connect Secure to version 8.1R5 | Oct 28, 2020 | May 21, 2015 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 20, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2015 |
| Ssh | — | Disable SSH support for ssh-diffie-hellman-group1-sha1 | Mar 31, 2020 | May 20, 2015 |
| Suse | — | Upgrade mysql-community-server-bench-debuginfoUpgrade libmysql55client18-32bitUpgrade libfreebl3-debuginfo-x86Upgrade mozillafirefox-develUpgrade libldap-openssl1-2_4-2-x86Upgrade libopenssl1_0_0-x86Upgrade libgnutls-develUpgrade java-1_7_0-ibm-alsaUpgrade openssh-fipsUpgrade MozillaThunderbird-buildsymbolsUpgrade libmysql55client18Upgrade libmysqlclient18-debuginfoUpgrade mariadb-debuginfoUpgrade apache2Upgrade apache2-debuginfoUpgrade openldap2-clientUpgrade mysql-community-server-tools-debuginfoUpgrade opensslUpgrade apache2-worker-debuginfoUpgrade libldap-2_4-2-debuginfoUpgrade apache2-event-debuginfoUpgrade openldap2-back-metaUpgrade java-1_7_1-ibm-develUpgrade libmysqlclient15-32bitUpgrade openssl-debuginfoUpgrade mariadb-test-debuginfoUpgrade firefox-libstdc++6Upgrade apache2-example-pagesUpgrade libcrypto34-debuginfo-32bitUpgrade libmysqlclient_r15-32bitUpgrade mozillafirefox-translations-otherUpgrade mysql-community-server-benchUpgrade openldap2-develUpgrade openssl-develUpgrade openldap2-client-openssl1Upgrade libmysqlclient18Upgrade mozilla-nss-develUpgrade java-1_6_0-ibm-alsaUpgrade mysql-community-server-test-debuginfoUpgrade openldap2-back-sqlUpgrade openssl1Upgrade openssl-devel-32bitUpgrade socat-debugsourceUpgrade libcrypto34-debuginfoUpgrade mariadb-clientUpgrade MozillaThunderbird-debugsourceUpgrade libressl-debugsourceUpgrade libressl-devel-32bitUpgrade apache2-mod_security2Upgrade mozilla-nspr-debuginfo-32bitUpgrade mysql-toolsUpgrade java-1_7_0-ibm-pluginUpgrade mozilla-nss-x86Upgrade mozilla-nss-sysinit-debuginfo-x86Upgrade mozillafirefox-translations-commonUpgrade mysql-community-server-debuginfoUpgrade mozilla-nss-tools-debuginfoUpgrade mysql-community-server-debugsourceUpgrade openldap2-debugsourceUpgrade libopenssl1_0_0-debuginfo-32bitUpgrade mariadbUpgrade libopenssl1_0_0-32bitUpgrade java-1_7_0-openjdk-demoUpgrade apache2-mod_jkUpgrade java-1_7_0-openjdk-headless-debuginfoUpgrade compat-openssl097gUpgrade mozilla-nss-debugsourceUpgrade libressl-devel-docUpgrade libssl33-debuginfo-32bitUpgrade libfreebl3-x86Upgrade libopenssl1_0_0Upgrade libopenssl0_9_8-x86Upgrade libsoftokn3Upgrade java-1_8_0-openjdk-headless-debuginfoUpgrade mozilla-nspr-32bitUpgrade libldap-openssl1-2_4-2Upgrade libldap-2_4-2-32bitUpgrade libldap-2_4-2Upgrade libmysqlclient18-debuginfo-32bitUpgrade apache2-prefork-debuginfoUpgrade java-1_7_0-openjdk-demo-debuginfoUpgrade libmysql56client18-debuginfoUpgrade mysqlUpgrade mozilla-nss-32bitUpgrade mozilla-nss-sysinit-x86Upgrade mozillathunderbird-translations-commonUpgrade libopenssl1_0_0-hmacUpgrade libmysql56client_r18-32bitUpgrade java-1_6_0-ibm-pluginUpgrade openssl-docUpgrade openldap2-debuginfoUpgrade mariadb-client-debuginfoUpgrade compat-libldap-2_3-0Upgrade compat-openssl098Upgrade libgnutls26-32bitUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_0-openjdkUpgrade socatUpgrade libmysqld-develUpgrade java-1_7_0-ibmUpgrade compat-openssl097g-32bitUpgrade apache2-develUpgrade java-1_8_0-openjdk-develUpgrade java-1_7_0-openjdk-bootstrap-debugsourceUpgrade mozilla-nss-certs-x86Upgrade libopenssl1_0_0-debuginfoUpgrade libmysql55client_r18-32bitUpgrade libtls4-debuginfoUpgrade mariadb-tools-debuginfoUpgrade java-1_7_0-openjdk-srcUpgrade libssl33Upgrade apache2-debugsourceUpgrade libmysqlclient15-x86Upgrade mariadb-benchUpgrade openldap2-docUpgrade libopenssl0_9_8Upgrade java-1_7_1-ibm-pluginUpgrade mozilla-nss-toolsUpgrade mozilla-nss-debuginfoUpgrade java-1_7_0-openjdk-debugsourceUpgrade libcrypto34-32bitUpgrade libopenssl1-develUpgrade mozilla-nss-certsUpgrade mariadb-errormessagesUpgrade mozillathunderbirdUpgrade mysql-MaxUpgrade mozilla-nss-sysinit-32bitUpgrade mysql-community-serverUpgrade libsoftokn3-debuginfo-x86Upgrade libsoftokn3-hmacUpgrade java-1_7_0-openjdk-devel-debuginfoUpgrade openldap2-devel-staticUpgrade mozilla-nss-certs-debuginfoUpgrade mysql-community-server-errormessagesUpgrade mariadb-testUpgrade libfreebl3-debuginfoUpgrade java-1_8_0-openjdk-debuginfoUpgrade libresslUpgrade java-1_8_0-openjdk-accessibilityUpgrade apache2-mod_auth_kerbUpgrade mysql-community-server-client-debuginfoUpgrade mozilla-nspr-debuginfo-x86Upgrade libmysql56client18Upgrade mozilla-nssUpgrade java-1_7_0-openjdk-bootstrap-devel-debuginfoUpgrade libopenssl0_9_8-32bitUpgrade libmysql56client18-32bitUpgrade libldap-openssl1-2_4-2-32bitUpgrade java-1_7_0-openjdk-javadocUpgrade java-1_7_0-openjdk-develUpgrade libressl-develUpgrade libtls4Upgrade libcrypto34Upgrade libmysqlclient_r15Upgrade mysql-community-server-toolsUpgrade mozilla-nspr-debuginfoUpgrade mysql-clientUpgrade openssl-debugsourceUpgrade MozillaFirefox-debugsourceUpgrade libsoftokn3-debuginfo-32bitUpgrade mozilla-nspr-debugsourceUpgrade libfreebl3-hmacUpgrade java-1_8_0-openjdk-headlessUpgrade opensshUpgrade libgnutls-extra26Upgrade mozilla-nss-certs-debuginfo-32bitUpgrade openldap2-back-meta-debuginfoUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_7_0-openjdk-bootstrap-headless-debuginfoUpgrade firefox-libgcc_s1Upgrade libmysqld18-debuginfoUpgrade libldap-2_4-2-debuginfo-32bitUpgrade mozillathunderbird-translations-otherUpgrade openssl-32bitUpgrade openssl1-docUpgrade apache2-preforkUpgrade mozilla-nspr-x86Upgrade libmysqld18Upgrade libopenssl-devel-32bitUpgrade openssh-askpassUpgrade libfreebl3-32bitUpgrade libfreebl3Upgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade java-1_7_0-ibm-develUpgrade openldap2-client-debugsourceUpgrade openldap2Upgrade java-1_7_0-ibm-jdbcUpgrade apache2-docUpgrade libopenssl0_9_8-hmacUpgrade mariadb-bench-debuginfoUpgrade libssl33-debuginfoUpgrade java-1_7_0-openjdk-bootstrapUpgrade libgnutls26Upgrade libfreebl3-debuginfo-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-openjdk-headlessUpgrade MozillaFirefox-debuginfoUpgrade libmysqlclient_r15-x86Upgrade mariadb-debugsourceUpgrade libgnutls-extra-develUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdk-debuginfoUpgrade openssh-helpersUpgrade socat-debuginfoUpgrade mozilla-nss-debuginfo-x86Upgrade apache2-utilsUpgrade apache2-utils-debuginfoUpgrade apache2-workerUpgrade mozilla-nss-sysinitUpgrade libmysql55client_r18-x86Upgrade libsoftokn3-32bitUpgrade openldap2-devel-32bitUpgrade mozilla-nsprUpgrade java-1_8_0-openjdk-debugsourceUpgrade java-1_6_0-ibmUpgrade java-1_7_1-ibm-alsaUpgrade openldap2-back-perlUpgrade libmysqlclient-develUpgrade openldap2-back-sql-debuginfoUpgrade java-1_7_0-openjdk-bootstrap-develUpgrade libfreebl3-hmac-32bitUpgrade libsoftokn3-debuginfoUpgrade java-1_8_0-openjdk-javadocUpgrade libmysqlclient15Upgrade java-1_6_0-ibm-fontsUpgrade firefox-gcc47Upgrade apache2-eventUpgrade libmysql56client_r18Upgrade libgnutls26-x86Upgrade libmysqlclient_r18Upgrade libmysqlclient_r18-32bitUpgrade compat-libldap-2_3-0-debuginfoUpgrade mysql-community-server-testUpgrade libsoftokn3-x86Upgrade java-1_8_0-openjdk-srcUpgrade mozilla-nss-certs-debuginfo-x86Upgrade java-1_7_0-openjdk-bootstrap-headlessUpgrade java-1_7_1-ibmUpgrade libtls4-32bitUpgrade mozillafirefox-buildsymbolsUpgrade openldap2-client-debuginfoUpgrade mozillafirefoxUpgrade libopenssl-develUpgrade libldap-2_4-2-x86Upgrade java-1_7_0-openjdk-bootstrap-debuginfoUpgrade openldap2-back-perl-debuginfoUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nspr-develUpgrade libmysql55client18-x86Upgrade openssh-askpass-gnomeUpgrade mariadb-toolsUpgrade libssl33-32bitUpgrade libmysql56client18-debuginfo-32bitUpgrade MozillaThunderbird-debuginfoUpgrade libmysql55client_r18Upgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-openjdk-demo-debuginfoUpgrade mozilla-nss-debuginfo-32bitUpgrade libmysqlclient18-32bitUpgrade libressl-debuginfoUpgrade MozillaThunderbird-develUpgrade mozilla-nss-sysinit-debuginfoUpgrade libsoftokn3-hmac-32bitUpgrade libopenssl0_9_8-hmac-32bitUpgrade libtls4-debuginfo-32bitUpgrade mozillafirefox-branding-sledUpgrade java-1_7_0-openjdk-accessibilityUpgrade mysql-community-server-clientUpgrade gnutlsUpgrade MozillaFirefox-translations | May 18, 2016 | May 20, 2015 |
| Tls Dhe Export Ciphers | — | Disable TLS/SSL support for export ciphers | Jun 10, 2015 | May 20, 2015 |
| Ubuntu | — | Upgrade openjdk-6-jdkUpgrade icedtea-6-jre-jamvmUpgrade openjdk-7-jre-libUpgrade openjdk-7-jdkUpgrade thunderbirdUpgrade openjdk-7-jreUpgrade openjdk-6-sourceUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jreUpgrade openjdk-6-jre-headlessUpgrade firefoxUpgrade openjdk-6-jre-zeroUpgrade icedtea-7-jre-jamvmUpgrade icedtea-6-jre-cacaoUpgrade openjdk-7-jre-headlessUpgrade openjdk-6-jre-lib | Nov 8, 2024 | May 21, 2015 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub