Security Advisory

CVE-2015-1716

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-05-13 10:00:00
Last updated 2024-08-06 04:54:14
Assigner microsoft
CVSS score not scored
State PUBLISHED

Description

Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly restrict Diffie-Hellman Ephemeral (DHE) key lengths, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, aka "Schannel Information Disclosure Vulnerability."