CVE-2015-7575
TLS 1.2 Transcipt Collision attacks against MD5 in key exchange protocol (SLOTH)
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · January 6, 2016
Updated · August 5, 2026
Description
A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to impersonate a TLS server or an authenticated TLS client.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5.8AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE not specified