CVE-2015-7575

NameCVE-2015-7575
DescriptionMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-410-1, DSA-3436-1, DSA-3437-1, DSA-3457-1, DSA-3458-1, DSA-3465-1, DSA-3491-1, DSA-3688-1
NVD severitymedium (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
gnutls26 (PTS)wheezy, wheezy (security)2.12.20-8+deb7u5fixed
gnutls28 (PTS)jessie3.3.8-6+deb8u7fixed
jessie (security)3.3.8-6+deb8u6fixed
stretch3.5.8-5+deb9u3fixed
stretch (security)3.5.8-5+deb9u1fixed
buster, sid3.5.16-1fixed
icedove (PTS)wheezy38.7.0-1~deb7u1fixed
wheezy (security)1:52.3.0-4~deb7u2fixed
jessie1:45.8.0-3~deb8u1fixed
jessie (security)1:52.3.0-4~deb8u2fixed
stretch (security), stretch1:52.3.0-4~deb9u1fixed
sid1:52.3.0-4fixed
iceweasel (PTS)wheezy, wheezy (security)38.8.0esr-1~deb7u1fixed
nss (PTS)wheezy2:3.14.5-1+deb7u5fixed
wheezy (security)2:3.26-1+debu7u5fixed
jessie (security), jessie2:3.26-1+debu8u3fixed
stretch (security), stretch2:3.26.2-1.1+deb9u1fixed
buster, sid2:3.34-1fixed
openjdk-6 (PTS)wheezy, wheezy (security)6b38-1.13.10-1~deb7u1fixed
openjdk-7 (PTS)wheezy7u95-2.6.4-1~deb7u1fixed
wheezy (security)7u151-2.6.11-2~deb7u3fixed
jessie7u111-2.6.7-1~deb8u1fixed
jessie (security)7u151-2.6.11-2~deb8u1fixed
openjdk-8 (PTS)stretch (security), stretch8u151-b12-1~deb9u1fixed
buster, sid8u151-b12-1fixed
openssl (PTS)wheezy1.0.1e-2+deb7u20fixed
wheezy (security)1.0.1t-1+deb7u3fixed
jessie (security), jessie1.0.1t-1+deb8u7fixed
stretch (security), stretch1.1.0f-3+deb9u1fixed
buster, sid1.1.0g-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
gnutls26source(unstable)(unfixed)medium
gnutls26sourcesqueeze(not affected)
gnutls26sourcewheezy2.12.20-8+deb7u5mediumDSA-3437-1
gnutls28source(unstable)3.3.15-1medium
gnutls28sourcejessie3.3.8-6+deb8u3medium
icedovesource(unstable)38.6.0-1medium
icedovesourcejessie38.6.0-1~deb8u1mediumDSA-3491-1
icedovesourcesqueeze(unfixed)end-of-life
icedovesourcewheezy38.6.0-1~deb7u1mediumDSA-3491-1
iceweaselsource(unstable)43.0.2-1medium
iceweaselsourcejessie38.6.0esr-1~deb8u1mediumDSA-3457-1
iceweaselsourcesqueeze(unfixed)end-of-life
iceweaselsourcewheezy38.6.0esr-1~deb7u1mediumDSA-3457-1
nsssource(unstable)2:3.21-1medium
nsssourcejessie2:3.26-1+debu8u1mediumDSA-3688-1
nsssourcesqueeze(not affected)
nsssourcewheezy(not affected)
openjdk-6source(unstable)(unfixed)medium
openjdk-6sourcesqueeze6b38-1.13.10-1~deb6u1mediumDLA-410-1
openjdk-6sourcewheezy6b38-1.13.10-1~deb7u1mediumDSA-3465-1
openjdk-7source(unstable)7u95-2.6.4-1medium
openjdk-7sourcejessie7u95-2.6.4-1~deb8u1mediumDSA-3458-1
openjdk-7sourcewheezy7u95-2.6.4-1~deb7u1mediumDSA-3458-1
openjdk-8source(unstable)7u95-2.6.4-1medium
opensslsource(unstable)1.0.1f-1medium
opensslsourcesqueeze(not affected)
opensslsourcewheezy1.0.1e-2+deb7u19mediumDSA-3436-1

Notes

[squeeze] - nss <not-affected> (only affects nss post 2012-07-26)
[wheezy] - nss <not-affected> (TLS 1.2 not supported in 3.14, only 3.15.1 and above)
https://www.mozilla.org/en-US/security/advisories/mfsa2015-150/
Patch in SuSE Bugzilla: https://bugzilla.novell.com/attachment.cgi?id=660286
NSS upstream fix is actually in 3.20.2: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.20.2_release_notes
NSS patch: https://hg.mozilla.org/projects/nss/raw-rev/891676aa0d85
[squeeze] - openssl <not-affected> (Vulnerable code not present)
OpenSSL fix: https://git.openssl.org/?p=openssl.git;a=commit;h=5e1ff664f95ab4c9176b3e86b5111e5777bad61a
http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/1ad1d1b46fef
[squeeze] - gnutls26 <not-affected> (TLS1.2 not supported)
http://gnutls.org/security.html#GNUTLS-SA-2015-2
http://lists.gnutls.org/pipermail/gnutls-devel/2015-April/007572.html
https://gitlab.com/gnutls/gnutls/commit/7d9d5c61f8445dc9e9ca47bb575c77cef17da17a
https://gitlab.com/gnutls/gnutls/commit/0e3fc7881d37246fc2d51dc404cad95b205c0e1e
https://gitlab.com/gnutls/gnutls/commit/6822a37947d4e38c45b1afc0121cda35ba897182
http://www.openwall.com/lists/oss-security/2015/05/05/8
http://www.mitls.org/pages/attacks/SLOTH

Search for package or bug name: Reporting problems