The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 5.3 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 5.3.12 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 6.1.8 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 6.1.9 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1 Openssl_advisory14 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Aix 7.1.2 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.1.3 Sendmail_advisory2 | — | — | Nov 16, 2015 | May 20, 2015 |
| Aix 7.2 Openssl_advisory17 | — | — | Aug 5, 2016 | May 20, 2015 |
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Jun 12, 2015 |
| Apple Osx Adminframework | — | Upgrade macOS to the latest versionApply OS X security update 2015-005 | Aug 28, 2015 | May 20, 2015 |
| Apple Osx Coretls | — | Upgrade macOS to the latest version | Mar 29, 2016 | May 20, 2015 |
| Centos_linux | — | Upgrade java-1.7.0-openjdk-javadocUpgrade opensslUpgrade openssl-perlUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-accessibilityUpgrade openssl-staticUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-headlessUpgrade nss-pkcs11-develUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-srcUpgrade nss-toolsUpgrade java-1.7.0-openjdkUpgrade nssUpgrade openssl-develUpgrade nss-develUpgrade nss-sysinitUpgrade openssl-libsUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade nss-util-develUpgrade nss-util | Dec 1, 2016 | May 20, 2015 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Dec 16, 2020 | May 21, 2015 |
| Debian | — | Upgrade iceweaselUpgrade nssUpgrade icedoveUpgrade opensslUpgrade openjdk-7Upgrade openjdk-6 | Mar 31, 2017 | May 20, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 16, 2015 |
| Freebsd | — | Upgrade mingw32-opensslUpgrade linux-firefoxUpgrade libresslUpgrade opensslUpgrade firefox-esrUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-c6-opensslUpgrade FreeBSDUpgrade libxulUpgrade firefox | Dec 10, 2025 | Jul 16, 2015 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade dev-libs/openssl.Upgrade dev-java/oracle-jdk-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird.Upgrade dev-libs/nss.Upgrade dev-java/oracle-jre-bin.Upgrade www-client/firefox-bin.Upgrade dev-libs/nspr. | Oct 30, 2017 | May 20, 2015 |
| Hp Ilo | — | Upgrade HP iLO 4 to version 2.30Upgrade HP iLO 2 to version 2.33Upgrade HP iLO 3 to version 1.87 | Aug 1, 2018 | May 20, 2015 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 26, 2016 | May 20, 2015 |
| Hpux | — | Update openssl.OPENSSL-LIB to the latest versionUpdate openssl.OPENSSL-DOC to the latest versionUpdate openssl.OPENSSL-MAN to the latest versionUpdate openssl.OPENSSL-RUN to the latest versionUpdate openssl.OPENSSL-CONF to the latest versionUpdate openssl.OPENSSL-PVT to the latest versionUpdate openssl.OPENSSL-INC to the latest versionUpdate openssl.OPENSSL-SRC to the latest versionUpdate openssl.OPENSSL-MIS to the latest versionUpdate openssl.OPENSSL-CER to the latest versionUpdate openssl.OPENSSL-PRNG to the latest version | Aug 11, 2017 | May 20, 2015 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | May 21, 2015 | May 21, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl098e | Dec 4, 2019 | May 21, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl098e | Dec 18, 2019 | May 21, 2015 |
| Ibm Aix | — | Apply the fix or workaround for java_july2015_advisoryApply the fix or workaround for openssl_advisory14Apply the fix or workaround for sendmail_advisory2Apply the fix or workaround for openssl_advisory17 | Nov 30, 2017 | May 20, 2015 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | May 21, 2015 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 14, 2015 | May 20, 2015 |
| Mfsa2015 70 | — | Upgrade to Mozilla Firefox version 39.0Upgrade to Mozilla Firefox ESR version 31.8Upgrade to Mozilla Firefox ESR version 38.1Upgrade to the latest version of Mozilla Firefox | Jul 8, 2015 | May 20, 2015 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.35.0 | Oct 22, 2015 | May 20, 2015 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 31.8Upgrade to Mozilla Thunderbird version 38.1 | Sep 14, 2015 | May 20, 2015 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 31.8.0-0.175.3.5.0.5.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 31.8.0-0.175.3.5.0.5.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.6-0.175.2.12.0.6.0 on Solaris 11.2Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/security/openssl to version 1.0.1.16-0.175.2.12.0.6.0 on Solaris 11.2 | May 29, 2017 | May 20, 2015 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-javadocUpgrade nss-pkcs11-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-accessibilityUpgrade openssl-perlUpgrade java-1.6.0-openjdk-demoUpgrade nss-utilUpgrade opensslUpgrade java-1.6.0-openjdkUpgrade nss-util-develUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadocUpgrade openssl-libsUpgrade nss-sysinitUpgrade openssl-develUpgrade nss-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade openssl-staticUpgrade java-1.8.0-openjdk-demoUpgrade nss-toolsUpgrade java-1.7.0-openjdkUpgrade nssUpgrade java-1.8.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk | May 13, 2016 | May 20, 2015 |
| Panos | — | Update PAN-OS 5.1 to the latest workaround for your deviceUpdate PAN-OS 6.0 to the latest workaround for your deviceUpgrade PAN-OS 7.0 to the latest versionUpdate PAN-OS 6.1 to the latest workaround for your deviceUpdate PAN-OS 5.0 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Oct 12, 2016 | May 20, 2015 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R6Update Pulse Connect Secure to version 7.1R22.2Update Pulse Connect Secure to version 8.1R5Update Pulse Connect Secure to version 7.4R13.5Update Pulse Connect Secure to version 8.0R13 | Oct 28, 2020 | May 21, 2015 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | May 20, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2015 |
| Ssh | — | Disable SSH support for ssh-diffie-hellman-group1-sha1 | Mar 31, 2020 | May 20, 2015 |
| Suse | — | Upgrade java-1_7_0-openjdk-bootstrap-debuginfoUpgrade firefox-libgcc_s1Upgrade openldap2-devel-32bitUpgrade mysql-clientUpgrade libssl33-32bitUpgrade openssh-askpass-gnomeUpgrade java-1_8_0-openjdk-demo-debuginfoUpgrade mozilla-nss-debuginfo-x86Upgrade libmysql56client18-debuginfo-32bitUpgrade libtls4-32bitUpgrade java-1_7_1-ibm-alsaUpgrade java-1_6_0-ibm-develUpgrade MozillaFirefox-debugsourceUpgrade mozilla-nspr-develUpgrade libmysqlclient-develUpgrade MozillaThunderbird-debuginfoUpgrade libfreebl3Upgrade java-1_7_1-ibmUpgrade openldap2-back-sql-debuginfoUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-nsprUpgrade libgnutls-extra26Upgrade compat-libldap-2_3-0-debuginfoUpgrade libopenssl-develUpgrade libsoftokn3-debuginfoUpgrade java-1_7_0-openjdk-headlessUpgrade libssl33-debuginfoUpgrade libopenssl1_0_0-hmac-32bitUpgrade java-1_7_0-openjdk-bootstrapUpgrade mozilla-nssUpgrade mariadb-bench-debuginfoUpgrade socat-debuginfoUpgrade libfreebl3-32bitUpgrade java-1_7_0-openjdk-debuginfoUpgrade libmysqlclient18-32bitUpgrade libfreebl3-debuginfo-32bitUpgrade apache2-docUpgrade libopenssl0_9_8-hmacUpgrade apache2-workerUpgrade openldap2Upgrade java-1_8_0-openjdk-javadocUpgrade libldap-2_4-2-debuginfo-32bitUpgrade libmysqld18-debuginfoUpgrade libmysqld18Upgrade MozillaFirefox-translations-commonUpgrade libgnutls-extra-develUpgrade libsoftokn3-debuginfo-32bitUpgrade java-1_7_0-openjdk-bootstrap-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-debuginfoUpgrade opensshUpgrade mariadb-debugsourceUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade mozillafirefox-branding-upstreamUpgrade openssl1-docUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_7_0-openjdk-bootstrap-headlessUpgrade openldap2-back-meta-debuginfoUpgrade libmysqlclient15Upgrade java-1_8_0-openjdk-headlessUpgrade openldap2-back-perl-debuginfoUpgrade libmysql56client18Upgrade libmysql55client_r18-x86Upgrade java-1_8_0-openjdkUpgrade java-1_8_0-openjdk-demoUpgrade libfreebl3-hmac-32bitUpgrade libressl-debuginfoUpgrade mozilla-nspr-debugsourceUpgrade java-1_6_0-ibm-fontsUpgrade mysql-community-server-client-debuginfoUpgrade java-1_8_0-openjdk-debugsourceUpgrade apache2-eventUpgrade java-1_7_0-openjdk-bootstrap-headless-debuginfoUpgrade mozilla-nss-certs-32bitUpgrade libmysqlclient_r18-32bitUpgrade libmysql55client_r18Upgrade libtls4Upgrade libldap-2_4-2-x86Upgrade mozillafirefox-buildsymbolsUpgrade libsoftokn3-x86Upgrade openssh-askpassUpgrade java-1_7_1-ibm-jdbcUpgrade apache2-preforkUpgrade libmysqlclient_r15Upgrade mozilla-nss-debuginfo-32bitUpgrade mariadb-toolsUpgrade libfreebl3-hmacUpgrade libcrypto34Upgrade mozilla-nss-certs-debuginfo-x86Upgrade mozilla-nspr-x86Upgrade openssl-32bitUpgrade libmysqlclient_r18Upgrade libmysql55client18-x86Upgrade mozilla-nspr-debuginfoUpgrade libmysql56client18-32bitUpgrade libsoftokn3-hmac-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-debuginfo-x86Upgrade java-1_7_0-openjdk-javadocUpgrade mysql-community-server-clientUpgrade openssl-debugsourceUpgrade libopenssl0_9_8-hmac-32bitUpgrade MozillaThunderbird-develUpgrade mozilla-nss-sysinit-debuginfoUpgrade java-1_7_0-openjdk-develUpgrade gnutlsUpgrade openldap2-client-debuginfoUpgrade libldap-openssl1-2_4-2-32bitUpgrade java-1_7_0-openjdk-accessibilityUpgrade libtls4-debuginfo-32bitUpgrade apache2-utils-debuginfoUpgrade mozilla-nss-sysinitUpgrade java-1_8_0-openjdk-srcUpgrade java-1_6_0-ibmUpgrade openldap2-back-perlUpgrade java-1_7_0-ibm-develUpgrade mysql-community-server-toolsUpgrade openldap2-client-debugsourceUpgrade MozillaFirefox-develUpgrade java-1_7_0-openjdk-bootstrap-devel-debuginfoUpgrade mysql-community-server-testUpgrade libmysqlclient_r15-x86Upgrade libgnutls26-x86Upgrade libopenssl-devel-32bitUpgrade libsoftokn3-32bitUpgrade libmysql56client_r18Upgrade libgnutls26Upgrade apache2-utilsUpgrade firefox-gcc47Upgrade libressl-develUpgrade openssh-helpersUpgrade libopenssl0_9_8-32bitUpgrade libmysql55client18Upgrade mariadbUpgrade mariadb-benchUpgrade mozilla-nss-toolsUpgrade mozilla-nss-certs-x86Upgrade openssl1Upgrade libldap-2_4-2Upgrade libopenssl1_0_0-32bitUpgrade mozilla-nss-x86Upgrade apache2-mod_jkUpgrade compat-openssl097gUpgrade mysql-community-server-tools-debuginfoUpgrade openldap2-devel-staticUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-sysinit-32bitUpgrade mariadb-testUpgrade java-1_8_0-openjdk-accessibilityUpgrade openldap2-develUpgrade openldap2-client-openssl1Upgrade libldap-2_4-2-debuginfoUpgrade compat-openssl097g-32bitUpgrade MozillaFirefoxUpgrade apache2-debugsourceUpgrade mariadb-test-debuginfoUpgrade apache2-debuginfoUpgrade libopenssl1_0_0-hmacUpgrade MozillaThunderbird-translations-otherUpgrade openssh-fipsUpgrade apache2-worker-debuginfoUpgrade apache2-example-pagesUpgrade apache2-event-debuginfoUpgrade libopenssl1_0_0-debuginfoUpgrade java-1_7_0-openjdkUpgrade libgnutls-develUpgrade libmysqlclient15-32bitUpgrade firefox-libstdc++6Upgrade openldap2-debugsourceUpgrade java-1_7_0-ibm-alsaUpgrade openssl-debuginfoUpgrade MozillaThunderbirdUpgrade mysqlUpgrade mysql-community-server-debuginfoUpgrade mariadb-tools-debuginfoUpgrade java-1_7_0-openjdk-demoUpgrade mysql-community-server-debugsourceUpgrade mozilla-nss-develUpgrade java-1_8_0-openjdk-headless-debuginfoUpgrade mysql-toolsUpgrade mozilla-nss-debugsourceUpgrade libopenssl1_0_0Upgrade mysql-community-server-bench-debuginfoUpgrade libssl33-debuginfo-32bitUpgrade libressl-devel-32bitUpgrade socatUpgrade openldap2-debuginfoUpgrade java-1_7_1-ibm-develUpgrade openldap2-docUpgrade libopenssl1_0_0-x86Upgrade libopenssl0_9_8Upgrade libfreebl3-debuginfo-x86Upgrade libmysqlclient15-x86Upgrade openssl-docUpgrade libmysql56client18-debuginfoUpgrade libmysql55client_r18-32bitUpgrade java-1_7_0-openjdk-debugsourceUpgrade mariadb-debuginfoUpgrade libtls4-debuginfoUpgrade mozilla-nss-certsUpgrade java-1_6_0-ibm-pluginUpgrade libcrypto34-debuginfoUpgrade mysql-community-serverUpgrade libopenssl1-develUpgrade mysql-community-server-test-debuginfoUpgrade libsoftokn3-hmacUpgrade socat-debugsourceUpgrade mysql-community-server-errormessagesUpgrade java-1_6_0-ibm-alsaUpgrade libmysqlclient18-debuginfoUpgrade java-1_7_0-ibmUpgrade libsoftokn3Upgrade apache2Upgrade mozilla-nss-32bitUpgrade MozillaThunderbird-buildsymbolsUpgrade libgnutls26-32bitUpgrade libfreebl3-debuginfoUpgrade compat-libldap-2_3-0Upgrade libresslUpgrade apache2-mod_auth_kerbUpgrade mozilla-nss-sysinit-debuginfo-x86Upgrade java-1_7_0-openjdk-srcUpgrade libsoftokn3-debuginfo-x86Upgrade libressl-devel-docUpgrade libcrypto34-debuginfo-32bitUpgrade apache2-prefork-debuginfoUpgrade libssl33Upgrade libldap-openssl1-2_4-2Upgrade openldap2-back-sqlUpgrade libmysqlclient18Upgrade mariadb-clientUpgrade mysql-MaxUpgrade mariadb-errormessagesUpgrade openssl-devel-32bitUpgrade mysql-community-server-benchUpgrade java-1_7_0-openjdk-headless-debuginfoUpgrade mozilla-nss-debuginfoUpgrade opensslUpgrade java-1_7_0-openjdk-demo-debuginfoUpgrade libmysqld-develUpgrade mozilla-nss-tools-debuginfoUpgrade java-1_7_0-ibm-pluginUpgrade MozillaThunderbird-debugsourceUpgrade openldap2-back-metaUpgrade mozilla-nspr-32bitUpgrade java-1_7_0-openjdk-bootstrap-debugsourceUpgrade libmysqlclient_r15-32bitUpgrade mozilla-nspr-debuginfo-32bitUpgrade openldap2-clientUpgrade java-1_8_0-openjdk-develUpgrade libmysqlclient18-debuginfo-32bitUpgrade libmysql55client18-32bitUpgrade compat-openssl098Upgrade apache2-mod_security2Upgrade openssl-develUpgrade java-1_7_0-openjdk-devel-debuginfoUpgrade mozilla-nss-sysinit-x86Upgrade libressl-debugsourceUpgrade mozilla-nss-certs-debuginfoUpgrade libcrypto34-32bitUpgrade libmysql56client_r18-32bitUpgrade mariadb-client-debuginfoUpgrade libopenssl0_9_8-x86Upgrade libfreebl3-x86Upgrade libopenssl1_0_0-debuginfo-32bitUpgrade libldap-2_4-2-32bitUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-openjdk-debuginfoUpgrade apache2-develUpgrade libldap-openssl1-2_4-2-x86Upgrade java-1_6_0-ibm-jdbc | May 18, 2016 | May 20, 2015 |
| Tls Dhe Export Ciphers | — | Disable TLS/SSL support for export ciphers | Jun 10, 2015 | May 20, 2015 |
| Ubuntu | — | Upgrade openjdk-6-sourceUpgrade openjdk-6-jre-libUpgrade openjdk-7-jre-zeroUpgrade firefoxUpgrade openjdk-6-jre-headlessUpgrade openjdk-6-jre-zeroUpgrade openjdk-7-jreUpgrade openjdk-6-jreUpgrade thunderbirdUpgrade icedtea-7-jre-jamvmUpgrade icedtea-6-jre-cacaoUpgrade openjdk-7-jre-headlessUpgrade openjdk-7-jdkUpgrade openjdk-7-jre-libUpgrade openjdk-6-jdkUpgrade icedtea-6-jre-jamvm | Nov 8, 2024 | May 21, 2015 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub