Information disclosure in Oracle Solaris and Opensuse - CVE-2015-2774
Published: April 8, 2016 / Updated: August 9, 2020
Vulnerability identifier: #VU40408
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2015-2774
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Oracle
SUSE
SUSE
Affected software:
Oracle Solaris
Opensuse
Oracle Solaris
Opensuse
Detailed vulnerability description
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
How to mitigate CVE-2015-2774
Install update from vendor's website.
Sources
- http://lists.opensuse.org/opensuse-updates/2016-02/msg00124.html
- http://openwall.com/lists/oss-security/2015/03/27/6
- http://openwall.com/lists/oss-security/2015/03/27/9
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/73398
- https://usn.ubuntu.com/3571-1/
- https://web.archive.org/web/20150905124006/
- http://www.erlang.org/news/85
- https://www.imperialviolet.org/2014/12/08/poodleagain.html