CVE-2015-2987

Type74 ED before 4.0 misuses 128-bit ECB encryption for small files, which makes it easier for attackers to obtain plaintext data via differential cryptanalysis of a file with an original length smaller than 128 bits.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
Affected Products (NVD)
VendorProductVersion
type74ed
𝑥
≤ 3.4
𝑥
= Vulnerable software versions
Azure Linux logo
Azure Linux Releases
Azure Package
Release
ed
Azure Linux 3.0
0:1.20-1.azl3
fixed
CBL-Mariner 1.0
0:1.14.2-8.cm1
fixed
CBL-Mariner 2.0
0:1.14.2-9.cm2
fixed
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN91474878/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000119
http://type74.org/edman5-1.php
http://type74org.blog14.fc2.com/blog-entry-1384.html
http://jvn.jp/en/jp/JVN91474878/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000119
http://type74.org/edman5-1.php
http://type74org.blog14.fc2.com/blog-entry-1384.html