CVE-2015-7542
An issue exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA...
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
- Record
CVE-2015-7542- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
CVE List No score
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
- Record
CVE-2015-7542- Updated
- 2026-11-02
EUVDEUVD-2015-7457 No score
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
- Record
EUVD-2015-7457- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m7m3-h648-r6cc No score
An issue exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA...
An issue exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
- Record
GHSA-m7m3-h648-r6cc- Updated
- 2026-11-02
OSV
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
- Record
CVE-2015-7542- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-7542
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
- Record
DEBIAN-CVE-2015-7542- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-7542
A vulnerability exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA certificates.
- Record
UBUNTU-CVE-2015-7542- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2018:0072-1 No score
Security update for gwenhywfar
This update for gwenhywfar fixes the following issues:
Security issue fixed:
- CVE-2015-7542: Make use of the system's default trusted CAs. Also remove the upstream provided ca-bundle.crt file and require ca-certificates so the /etc/ssl/certs directory is populated (bsc#958331).
- Record
SUSE-SU-2018:0072-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libgwenhywfarDebian:12 |
before 4.12.0beta-3 | 4.12.0beta-3 |
libgwenhywfarDebian:13 |
before 4.12.0beta-3 | 4.12.0beta-3 |
libgwenhywfarDebian:14 |
before 4.12.0beta-3 | 4.12.0beta-3 |
libgwenhywfarDebian:7 |
before 4.3.3-1+deb7u1, plus listed versions 4.3.3-1 |
4.3.3-1+deb7u1 |
gwenhywfarSUSE:Linux Enterprise Desktop 12 SP2 |
before 4.9.0beta-3.3.1 | 4.9.0beta-3.3.1 |
gwenhywfarSUSE:Linux Enterprise Desktop 12 SP3 |
before 4.9.0beta-3.3.1 | 4.9.0beta-3.3.1 |
gwenhywfarSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 4.9.0beta-3.3.1 | 4.9.0beta-3.3.1 |
gwenhywfarSUSE:Linux Enterprise Software Development Kit 12 SP3 |
before 4.9.0beta-3.3.1 | 4.9.0beta-3.3.1 |
gwenhywfarSUSE:Linux Enterprise Workstation Extension 12 SP2 |
before 4.9.0beta-3.3.1 | 4.9.0beta-3.3.1 |
gwenhywfarSUSE:Linux Enterprise Workstation Extension 12 SP3 |
before 4.9.0beta-3.3.1 | 4.9.0beta-3.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-7542 is a medium vulnerability (CVSS 5.3) in Aquamaniac Gwenhywfar, published May 12, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in libgwenhywfar 4.12.0beta-3.
References
lists.opensuse.org/opensuse-updates/2018-01/msg00038.html
bugzilla.redhat.com/show_bug.cgi?id=1272503
lists.fedoraproject.org/pipermail/package-announce/2015-December/174484.html
nvd.nist.gov/vuln/detail/CVE-2015-7542
access.redhat.com/security/cve/cve-2015-7542
Show 9 moreShow less
bugzilla.suse.com/show_bug.cgi?id=CVE-2015-7542
security-tracker.debian.org/tracker/CVE-2015-7542
github.com/advisories/GHSA-m7m3-h648-r6cc
suse.com/support/update/announcement/2018/suse-su-20180072-1
ubuntu.com/security/CVE-2015-7542
cve.org/CVERecord?id=CVE-2015-7542