Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-2177 (GCVE-0-2016-2177)
Vulnerability from cvelistv5 – Published: 2016-06-20 00:00 – Updated: 2024-08-05 23:17
VLAI
EPSS
Summary
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
64 references
Date Public
2016-06-01 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T23:17:50.601Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2016-20"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.splunk.com/view/SP-CAAAPUE"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"name": "RHSA-2017:1659",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
},
{
"name": "RHSA-2017:1658",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
},
{
"name": "RHSA-2016:1940",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1940.html"
},
{
"name": "1036088",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1036088"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html"
},
{
"name": "GLSA-201612-16",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201612-16"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager"
},
{
"tags": [
"x_transferred"
],
"url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03856en_us"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.splunk.com/view/SP-CAAAPSV"
},
{
"tags": [
"x_transferred"
],
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21995039"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2016-16"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2016-21"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "RHSA-2017:0194",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
},
{
"name": "RHSA-2017:0193",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html"
},
{
"name": "RHSA-2016:2957",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://bto.bluecoat.com/security-advisory/sa132"
},
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/"
},
{
"name": "91319",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/91319"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
},
{
"name": "FreeBSD-SA-16:26",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03763en_us"
},
{
"tags": [
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448"
},
{
"tags": [
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10165"
},
{
"tags": [
"x_transferred"
],
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
},
{
"name": "[oss-security] 20160608 CVE-2016-2177: OpenSSL undefined pointer arithmetic",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2016/06/08/9"
},
{
"tags": [
"x_transferred"
],
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10215"
},
{
"name": "SUSE-SU-2017:2700",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html"
},
{
"name": "USN-3087-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-3087-1"
},
{
"name": "SUSE-SU-2016:2469",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html"
},
{
"name": "20160927 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl"
},
{
"name": "openSUSE-SU-2016:2537",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html"
},
{
"name": "USN-3087-2",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-3087-2"
},
{
"name": "20170801 [security bulletin] HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/540957/100/0/threaded"
},
{
"name": "SUSE-SU-2017:2699",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html"
},
{
"name": "20170801 [security bulletin] HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded"
},
{
"name": "openSUSE-SU-2016:2407",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html"
},
{
"name": "20170717 Orion Elite Hidden IP Browser Pro - All Versions - Multiple Known Vulnerabilities",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2017/Jul/31"
},
{
"name": "USN-3181-1",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-3181-1"
},
{
"name": "SUSE-SU-2016:2458",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03856en_us"
},
{
"tags": [
"x_transferred"
],
"url": "https://support.f5.com/csp/article/K23873366"
},
{
"name": "DSA-3673",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://www.debian.org/security/2016/dsa-3673"
},
{
"name": "openSUSE-SU-2016:2391",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html"
},
{
"name": "openSUSE-SU-2018:0458",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html"
},
{
"name": "SUSE-SU-2016:2387",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05302448"
},
{
"name": "SUSE-SU-2016:2468",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html"
},
{
"name": "SUSE-SU-2016:2394",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24"
},
{
"tags": [
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-06-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-12-13T00:00:00.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"url": "https://www.tenable.com/security/tns-2016-20"
},
{
"url": "http://www.splunk.com/view/SP-CAAAPUE"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"name": "RHSA-2017:1659",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-1659.html"
},
{
"name": "RHSA-2017:1658",
"tags": [
"vendor-advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
},
{
"name": "RHSA-2016:1940",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-1940.html"
},
{
"name": "1036088",
"tags": [
"vdb-entry"
],
"url": "http://www.securitytracker.com/id/1036088"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html"
},
{
"name": "GLSA-201612-16",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/201612-16"
},
{
"url": "https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager"
},
{
"url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312"
},
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03856en_us"
},
{
"url": "http://www.splunk.com/view/SP-CAAAPSV"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21995039"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
},
{
"url": "https://www.tenable.com/security/tns-2016-16"
},
{
"url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7"
},
{
"url": "https://www.tenable.com/security/tns-2016-21"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "RHSA-2017:0194",
"tags": [
"vendor-advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
},
{
"name": "RHSA-2017:0193",
"tags": [
"vendor-advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
},
{
"url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html"
},
{
"name": "RHSA-2016:2957",
"tags": [
"vendor-advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
},
{
"url": "https://bto.bluecoat.com/security-advisory/sa132"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"url": "https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/"
},
{
"name": "91319",
"tags": [
"vdb-entry"
],
"url": "http://www.securityfocus.com/bid/91319"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
},
{
"name": "FreeBSD-SA-16:26",
"tags": [
"vendor-advisory"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc"
},
{
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03763en_us"
},
{
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10165"
},
{
"url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
},
{
"name": "[oss-security] 20160608 CVE-2016-2177: OpenSSL undefined pointer arithmetic",
"tags": [
"mailing-list"
],
"url": "http://www.openwall.com/lists/oss-security/2016/06/08/9"
},
{
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10215"
},
{
"name": "SUSE-SU-2017:2700",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html"
},
{
"name": "USN-3087-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-3087-1"
},
{
"name": "SUSE-SU-2016:2469",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html"
},
{
"name": "20160927 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016",
"tags": [
"vendor-advisory"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl"
},
{
"name": "openSUSE-SU-2016:2537",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html"
},
{
"name": "USN-3087-2",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-3087-2"
},
{
"name": "20170801 [security bulletin] HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)",
"tags": [
"mailing-list"
],
"url": "http://www.securityfocus.com/archive/1/540957/100/0/threaded"
},
{
"name": "SUSE-SU-2017:2699",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html"
},
{
"name": "20170801 [security bulletin] HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS)",
"tags": [
"mailing-list"
],
"url": "http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded"
},
{
"name": "openSUSE-SU-2016:2407",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html"
},
{
"name": "20170717 Orion Elite Hidden IP Browser Pro - All Versions - Multiple Known Vulnerabilities",
"tags": [
"mailing-list"
],
"url": "http://seclists.org/fulldisclosure/2017/Jul/31"
},
{
"name": "USN-3181-1",
"tags": [
"vendor-advisory"
],
"url": "http://www.ubuntu.com/usn/USN-3181-1"
},
{
"name": "SUSE-SU-2016:2458",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html"
},
{
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03856en_us"
},
{
"url": "https://support.f5.com/csp/article/K23873366"
},
{
"name": "DSA-3673",
"tags": [
"vendor-advisory"
],
"url": "http://www.debian.org/security/2016/dsa-3673"
},
{
"name": "openSUSE-SU-2016:2391",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html"
},
{
"name": "openSUSE-SU-2018:0458",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html"
},
{
"name": "SUSE-SU-2016:2387",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html"
},
{
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05302448"
},
{
"name": "SUSE-SU-2016:2468",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html"
},
{
"name": "SUSE-SU-2016:2394",
"tags": [
"vendor-advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html"
},
{
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en"
},
{
"url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24"
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2016-2177",
"datePublished": "2016-06-20T00:00:00.000Z",
"dateReserved": "2016-01-29T00:00:00.000Z",
"dateUpdated": "2024-08-05T23:17:50.601Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2016-2177",
"date": "2026-05-27",
"epss": "0.29058",
"percentile": "0.9665"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:icewall_mcrp:3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6AFB9DD-DA50-4F9D-B19D-160CA487D002\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:certd:*:*:*\", \"matchCriteriaId\": \"87037877-8506-4737-9F47-2CB687975B1C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:dfw:*:*:*\", \"matchCriteriaId\": \"FD94C478-6F81-4F37-B7F3-61D8682EC593\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:icewall_sso_agent_option:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"531FE660-C1A9-4C83-90BE-E38AA493D4F7\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D1C00C0-C77E-4255-9ECA-20F2673C7366\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C684FB18-FDDC-4BED-A28C-C23EE6CD0094\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A74A79A7-4FAF-4C81-8622-050008B96AE1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CEDACCB9-8D61-49EE-9957-9E58BC7BB031\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E884B241-F9C3-44F8-A420-DE65F5F3D660\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3A383620-B4F7-44A7-85DA-A4FF2E115D80\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F0C6812-F455-49CF-B29B-9AC00306DA43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3703E445-17C0-4C85-A496-A35641C0C8DB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABEC1927-F469-4B9E-B544-DA6CF90F0B34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A9EC827B-5313-47D7-BF49-CFF033CF3D53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A438E65F-33B1-46BC-AD93-200DCC6B43D4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4BFDCF78-62C1-429E-A43C-0C9FEC14837D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A0B4DEF-C6E8-4243-9893-6E650013600C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E28CD4F7-522F-4ECA-9035-228596CDE769\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A491B32F-31F0-4151-AE9B-313CBF2C060D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0AF4953B-BB23-4C80-8C48-9E94EB234AAE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"60F946FD-F564-49DA-B043-5943308BA9EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B89180B-FB68-4DD8-B076-16E51CC7FB91\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C986592-4086-4A39-9767-EF34DBAA6A53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B23181C-03DB-4E92-B3F6-6B585B5231B4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"94D9EC1C-4843-4026-9B05-E060E9391734\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"036FB24F-7D86-4730-8BC9-722875BEC807\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:oracle:linux:5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CE882C74-313C-47A9-9FA0-05F2CBF09D1A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CC7A498A-A669-4C42-8134-86103C799D13\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"104DA87B-DEE4-4262-AE50-8E6BC43B228B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"964B57CD-CB8A-4520-B358-1C93EC5EF2DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"79A602C5-61FE-47BA-9786-F045B6C6DBA8\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.\"}, {\"lang\": \"es\", \"value\": \"OpenSSL hasta la versi\\u00f3n 1.0.2h no utiliza correctamente la aritm\\u00e9tica de puntero para comprobaciones de l\\u00edmites de buffer de memoria din\\u00e1mica, lo que podr\\u00eda permitir a atacantes remotos provocar una denegaci\\u00f3n de servicio (desbordamiento de entero y ca\\u00edda de aplicaci\\u00f3n) o posiblemente tener otro impacto no especificado aprovechando un comportamiento malloc no esperado, relacionado con s3_srvr.c, ssl_sess.c, y t1_lib.c.\"}]",
"id": "CVE-2016-2177",
"lastModified": "2024-11-21T02:47:57.867",
"metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2016-06-20T01:59:02.087",
"references": "[{\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-1940.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2957.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2017-1659.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://seclists.org/fulldisclosure/2017/Jul/31\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2016/dsa-3673\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2016/06/08/9\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/540957/100/0/threaded\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/91319\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1036088\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.splunk.com/view/SP-CAAAPSV\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.splunk.com/view/SP-CAAAPUE\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-3087-1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-3087-2\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-3181-1\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0193\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0194\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1658\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bto.bluecoat.com/security-advisory/sa132\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1341705\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05302448\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03763en_us\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10165\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10215\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://security.gentoo.org/glsa/201612-16\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://support.f5.com/csp/article/K23873366\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03856en_us\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03856en_us\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-16\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.tenable.com/security/tns-2016-20\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-21\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-1940.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2957.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2017-1659.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://seclists.org/fulldisclosure/2017/Jul/31\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2016/dsa-3673\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2016/06/08/9\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/540957/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/91319\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1036088\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.splunk.com/view/SP-CAAAPSV\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.splunk.com/view/SP-CAAAPUE\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.ubuntu.com/usn/USN-3087-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-3087-2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.ubuntu.com/usn/USN-3181-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0193\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0194\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1658\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bto.bluecoat.com/security-advisory/sa132\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1341705\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05302448\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03763en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10165\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10215\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/201612-16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://support.f5.com/csp/article/K23873366\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03856en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03856en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.tenable.com/security/tns-2016-20\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-21\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-190\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2016-2177\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2016-06-20T01:59:02.087\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.\"},{\"lang\":\"es\",\"value\":\"OpenSSL hasta la versi\u00f3n 1.0.2h no utiliza correctamente la aritm\u00e9tica de puntero para comprobaciones de l\u00edmites de buffer de memoria din\u00e1mica, lo que podr\u00eda permitir a atacantes remotos provocar una denegaci\u00f3n de servicio (desbordamiento de entero y ca\u00edda de aplicaci\u00f3n) o posiblemente tener otro impacto no especificado aprovechando un comportamiento malloc no esperado, relacionado con s3_srvr.c, ssl_sess.c, y t1_lib.c.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:icewall_mcrp:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6AFB9DD-DA50-4F9D-B19D-160CA487D002\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:certd:*:*:*\",\"matchCriteriaId\":\"87037877-8506-4737-9F47-2CB687975B1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:icewall_sso:10.0:*:*:*:dfw:*:*:*\",\"matchCriteriaId\":\"FD94C478-6F81-4F37-B7F3-61D8682EC593\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:icewall_sso_agent_option:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"531FE660-C1A9-4C83-90BE-E38AA493D4F7\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D1C00C0-C77E-4255-9ECA-20F2673C7366\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C684FB18-FDDC-4BED-A28C-C23EE6CD0094\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A74A79A7-4FAF-4C81-8622-050008B96AE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CEDACCB9-8D61-49EE-9957-9E58BC7BB031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E884B241-F9C3-44F8-A420-DE65F5F3D660\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A383620-B4F7-44A7-85DA-A4FF2E115D80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F0C6812-F455-49CF-B29B-9AC00306DA43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3703E445-17C0-4C85-A496-A35641C0C8DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABEC1927-F469-4B9E-B544-DA6CF90F0B34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9EC827B-5313-47D7-BF49-CFF033CF3D53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A438E65F-33B1-46BC-AD93-200DCC6B43D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BFDCF78-62C1-429E-A43C-0C9FEC14837D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A0B4DEF-C6E8-4243-9893-6E650013600C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E28CD4F7-522F-4ECA-9035-228596CDE769\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A491B32F-31F0-4151-AE9B-313CBF2C060D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AF4953B-BB23-4C80-8C48-9E94EB234AAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60F946FD-F564-49DA-B043-5943308BA9EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B89180B-FB68-4DD8-B076-16E51CC7FB91\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C986592-4086-4A39-9767-EF34DBAA6A53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B23181C-03DB-4E92-B3F6-6B585B5231B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94D9EC1C-4843-4026-9B05-E060E9391734\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"036FB24F-7D86-4730-8BC9-722875BEC807\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:oracle:linux:5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE882C74-313C-47A9-9FA0-05F2CBF09D1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC7A498A-A669-4C42-8134-86103C799D13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"104DA87B-DEE4-4262-AE50-8E6BC43B228B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"964B57CD-CB8A-4520-B358-1C93EC5EF2DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79A602C5-61FE-47BA-9786-F045B6C6DBA8\"}]}]}],\"references\":[{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-1940.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2957.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-1659.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2017/Jul/31\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3673\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/06/08/9\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/540957/100/0/threaded\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/91319\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1036088\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.splunk.com/view/SP-CAAAPSV\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.splunk.com/view/SP-CAAAPUE\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-3087-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3087-2\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3181-1\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0193\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0194\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1658\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa132\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1341705\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05302448\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03763en_us\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10165\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10215\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://security.gentoo.org/glsa/201612-16\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://support.f5.com/csp/article/K23873366\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03856en_us\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03856en_us\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.tenable.com/security/tns-2016-16\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2016-20\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.tenable.com/security/tns-2016-21\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-1940.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2957.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-1659.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://seclists.org/fulldisclosure/2017/Jul/31\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2016/dsa-3673\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/06/08/9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/540957/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/91319\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1036088\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.splunk.com/view/SP-CAAAPSV\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.splunk.com/view/SP-CAAAPUE\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-3087-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3087-2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-3181-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0193\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0194\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1658\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa132\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1341705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-c05302448\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03763en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10165\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10215\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201612-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://support.f5.com/csp/article/K23873366\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en\u0026docId=emr_na-hpesbhf03856en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03856en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.tenable.com/security/tns-2016-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2016-20\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.tenable.com/security/tns-2016-21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
RHSA-2017:1659
Vulnerability from csaf_redhat - Published: 2017-06-28 19:59 - Updated: 2026-05-14 22:23Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update
Severity
Important
Notes
Topic: An update is now available for Red Hat JBoss Enterprise Application Platform.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.
This release includes bug fixes as well as a new release of OpenSSL that addresses a number of outstanding security flaws. For further information, see the knowledge base article linked to in the References section. All users of Red Hat JBoss Enterprise Application Platform 6.4 on Red Hat Enterprise Linux 6 are advised to upgrade to these updated packages.
Security Fix(es):
* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)
* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)
* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)
* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.
5.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
30 references
Acknowledgments
the OpenSSL project
Gear Team of Qihoo 360 Inc.
Shi Lei
Gear Team of Qihoo 360 Inc.
Shi Lei
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat JBoss Enterprise Application Platform.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.\n\nThis release includes bug fixes as well as a new release of OpenSSL that addresses a number of outstanding security flaws. For further information, see the knowledge base article linked to in the References section. All users of Red Hat JBoss Enterprise Application Platform 6.4 on Red Hat Enterprise Linux 6 are advised to upgrade to these updated packages.\n\nSecurity Fix(es):\n\n* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)\n\n* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)\n\n* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)\n\n* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1659",
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/2688611",
"url": "https://access.redhat.com/articles/2688611"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/222023",
"url": "https://access.redhat.com/solutions/222023"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/",
"url": "https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4"
},
{
"category": "external",
"summary": "1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1659.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update",
"tracking": {
"current_release_date": "2026-05-14T22:23:36+00:00",
"generator": {
"date": "2026-05-14T22:23:36+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2017:1659",
"initial_release_date": "2017-06-28T19:59:51+00:00",
"revision_history": [
{
"date": "2017-06-28T19:59:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-28T19:59:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:23:36+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.4",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.4",
"product_id": "Red Hat JBoss Enterprise Application Platform 6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.4"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2016-06-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1341705"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Possible integer overflow vulnerabilities in codebase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "RHBZ#1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Possible integer overflow vulnerabilities in codebase"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1343400"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Non-constant time codepath followed for certain operations in DSA implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "RHBZ#1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178"
},
{
"category": "external",
"summary": "http://eprint.iacr.org/2016/594",
"url": "http://eprint.iacr.org/2016/594"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Non-constant time codepath followed for certain operations in DSA implementation"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc.",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-6304",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2016-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1377600"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OCSP Status Request extension unbounded memory growth",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "TLS server applications using OpenSSL versions in Red Hat Enterprise Linux 6 and 7 are only affected if they enable OCSP stapling support. Applications not enabling OCSP stapling support are not affected. Few applications implement OCSP stapling support and typically do not enable it by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "RHBZ#1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6304",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: OCSP Status Request extension unbounded memory growth"
},
{
"acknowledgments": [
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc."
}
],
"cve": "CVE-2016-8610",
"discovery_date": "2016-10-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1384743"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects applications that are compiled against OpenSSL or GnuTLS and do not allocate an extra thread for processing ClientHello messages. Nginx is affected by this issue; Apache httpd is not affected by this issue. This issue has been rated as having a security impact of Moderate. It requires an attacker to send a very large amount of SSL ALERT messages to the host network connection. This issue can also be mitigated by configuring firewalls to limit the number of connections per IP address, or use deep packet inspection to reject these type of alert packets. A future update may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8610"
},
{
"category": "external",
"summary": "RHBZ#1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8610",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610"
},
{
"category": "external",
"summary": "http://security.360.cn/cve/CVE-2016-8610",
"url": "http://security.360.cn/cve/CVE-2016-8610"
}
],
"release_date": "2016-10-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS"
}
]
}
RHSA-2017_0193
Vulnerability from csaf_redhat - Published: 2017-01-25 20:05 - Updated: 2024-11-22 10:06Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6
Severity
Important
Notes
Topic: Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.23 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This release adds the new Apache HTTP Server 2.4.23 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.6, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)
* It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow. (CVE-2016-6808)
* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)
* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)
* It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash. (CVE-2016-4459)
* An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process. (CVE-2016-8612)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-2108. The CVE-2016-4459 issue was discovered by Robert Bost (Red Hat). Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library.
5.6 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.
5.9 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.
5.1 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash.
4.8 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow.
8.1 (High)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process.
4.3 (Medium)
Affected products
Fixed
84 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
References
37 references
Acknowledgments
the OpenSSL project
Google
David Benjamin
Hanno Böck
Red Hat
Huzaifa Sidhpurwala
Red Hat
Robert Bost
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.23 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.23 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.6, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)\n\n* It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow. (CVE-2016-6808)\n\n* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)\n\n* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)\n\n* It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash. (CVE-2016-4459)\n\n* An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process. (CVE-2016-8612)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-2108. The CVE-2016-4459 issue was discovered by Robert Bost (Red Hat). Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0193",
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1331402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331402"
},
{
"category": "external",
"summary": "1341583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341583"
},
{
"category": "external",
"summary": "1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "1382352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382352"
},
{
"category": "external",
"summary": "1387605",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1387605"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0193.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6",
"tracking": {
"current_release_date": "2024-11-22T10:06:55+00:00",
"generator": {
"date": "2024-11-22T10:06:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0193",
"initial_release_date": "2017-01-25T20:05:09+00:00",
"revision_history": [
{
"date": "2017-01-25T20:05:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-25T20:05:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T10:06:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-16.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-debuginfo@2.4.1-16.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-src-zip@2.4.1-16.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-35.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb-debuginfo@5.4-35.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.12.0-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.12.0-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.5-13.Final_redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-src-zip@1.3.5-13.Final_redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.5-13.Final_redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-12.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-12.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-12.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-12.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-12.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-12.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-18.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-src-zip@2.9.1-18.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.1-18.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-14.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-debuginfo@0.9.6-14.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-src-zip@0.9.6-14.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-zip@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-src-zip@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.23-102.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.23-102.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.23-102.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-src-zip@1.2.41-14.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.41-14.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.41-14.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.41-14.redhat_1.jbcs.el6?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-16.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-debuginfo@2.4.1-16.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-src-zip@2.4.1-16.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb-debuginfo@5.4-35.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-35.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.12.0-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.12.0-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.5-13.Final_redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-src-zip@1.3.5-13.Final_redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.5-13.Final_redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-12.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-12.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-12.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-12.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-12.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-12.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-18.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-src-zip@2.9.1-18.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.1-18.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-14.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-debuginfo@0.9.6-14.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-src-zip@0.9.6-14.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-zip@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-src-zip@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.23-102.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.23-102.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.23-102.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-src-zip@1.2.41-14.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.41-14.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.41-14.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.41-14.redhat_1.jbcs.el6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-16.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-35.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.12.0-9.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.5-13.Final_redhat_1.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-12.jbcs.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-18.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-14.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.23-102.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.41-14.redhat_1.jbcs.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.23-102.jbcs.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"David Benjamin"
],
"organization": "Google",
"summary": "Acknowledged by upstream."
},
{
"names": [
"Hanno B\u00f6ck"
],
"summary": "Acknowledged by upstream."
},
{
"names": [
"Huzaifa Sidhpurwala"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2108",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1331402"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Memory corruption in the ASN.1 encoder",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2108"
},
{
"category": "external",
"summary": "RHBZ#1331402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331402"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2108",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2108"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2108",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2108"
},
{
"category": "external",
"summary": "https://openssl.org/news/secadv/20160503.txt",
"url": "https://openssl.org/news/secadv/20160503.txt"
}
],
"release_date": "2016-05-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:05:09+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library\nmust be restarted, or the system rebooted. After installing the updated\npackages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Memory corruption in the ASN.1 encoder"
},
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2016-06-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1341705"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Possible integer overflow vulnerabilities in codebase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "RHBZ#1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:05:09+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library\nmust be restarted, or the system rebooted. After installing the updated\npackages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Possible integer overflow vulnerabilities in codebase"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1343400"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Non-constant time codepath followed for certain operations in DSA implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "RHBZ#1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178"
},
{
"category": "external",
"summary": "http://eprint.iacr.org/2016/594",
"url": "http://eprint.iacr.org/2016/594"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:05:09+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library\nmust be restarted, or the system rebooted. After installing the updated\npackages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Non-constant time codepath followed for certain operations in DSA implementation"
},
{
"acknowledgments": [
{
"names": [
"Robert Bost"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2016-4459",
"discovery_date": "2016-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1341583"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4459"
},
{
"category": "external",
"summary": "RHBZ#1341583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341583"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4459",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4459"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4459",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4459"
}
],
"release_date": "2016-10-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:05:09+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library\nmust be restarted, or the system rebooted. After installing the updated\npackages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 3.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:S/C:N/I:N/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute"
},
{
"cve": "CVE-2016-6808",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2016-10-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1382352"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_jk: Buffer overflow when concatenating virtual host name and URI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6808"
},
{
"category": "external",
"summary": "RHBZ#1382352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382352"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6808",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6808"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6808",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6808"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.42",
"url": "https://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.42"
}
],
"release_date": "2016-10-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:05:09+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library\nmust be restarted, or the system rebooted. After installing the updated\npackages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mod_jk: Buffer overflow when concatenating virtual host name and URI"
},
{
"cve": "CVE-2016-8612",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-10-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1387605"
}
],
"notes": [
{
"category": "description",
"text": "An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_cluster: Protocol parsing logic error",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8612"
},
{
"category": "external",
"summary": "RHBZ#1387605",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1387605"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8612",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8612"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8612",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8612"
}
],
"release_date": "2016-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:05:09+00:00",
"details": "For details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library\nmust be restarted, or the system rebooted. After installing the updated\npackages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0193"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-src-zip-0:1.3.5-13.Final_redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-src-zip-0:1.2.41-14.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "mod_cluster: Protocol parsing logic error"
}
]
}
RHSA-2017_0194
Vulnerability from csaf_redhat - Published: 2017-01-25 20:04 - Updated: 2024-11-22 10:07Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 7
Severity
Important
Notes
Topic: An update is now available for JBoss Core Services on RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: This release adds the new Apache HTTP Server 2.4.23 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.6 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)
* It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow. (CVE-2016-6808)
* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)
* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)
* It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash. (CVE-2016-4459)
* An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process. (CVE-2016-8612)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-2108. The CVE-2016-4459 issue was discovered by Robert Bost (Red Hat). Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library.
5.6 (Medium)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.
5.9 (Medium)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.
5.1 (Medium)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash.
4.8 (Medium)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow.
8.1 (High)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process.
4.3 (Medium)
Affected products
Fixed
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
References
37 references
Acknowledgments
the OpenSSL project
Google
David Benjamin
Hanno Böck
Red Hat
Huzaifa Sidhpurwala
Red Hat
Robert Bost
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for JBoss Core Services on RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.23 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.6 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)\n\n* It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow. (CVE-2016-6808)\n\n* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)\n\n* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)\n\n* It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash. (CVE-2016-4459)\n\n* An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process. (CVE-2016-8612)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-2108. The CVE-2016-4459 issue was discovered by Robert Bost (Red Hat). Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0194",
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1331402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331402"
},
{
"category": "external",
"summary": "1341583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341583"
},
{
"category": "external",
"summary": "1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "1382352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382352"
},
{
"category": "external",
"summary": "1387605",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1387605"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0194.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 7",
"tracking": {
"current_release_date": "2024-11-22T10:07:00+00:00",
"generator": {
"date": "2024-11-22T10:07:00+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2017:0194",
"initial_release_date": "2017-01-25T20:04:50+00:00",
"revision_history": [
{
"date": "2017-01-25T20:04:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-01-25T20:04:50+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T10:07:00+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-debuginfo@2.4.1-16.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-src-zip@2.4.1-16.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-16.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.12.0-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.12.0-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-35.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb-debuginfo@5.4-35.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.5-13.Final_redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.5-13.Final_redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-12.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-12.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-12.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-12.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-12.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-12.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-18.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.1-18.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-src-zip@2.9.1-18.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-14.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-src-zip@0.9.6-14.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-debuginfo@0.9.6-14.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-zip@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-src-zip@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.23-102.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.23-102.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.23-102.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.41-14.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.41-14.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.41-14.redhat_1.jbcs.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-16.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.12.0-9.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-35.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.5-13.Final_redhat_1.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-12.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-18.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-14.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.23-102.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.41-14.redhat_1.jbcs.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.23-102.jbcs.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"David Benjamin"
],
"organization": "Google",
"summary": "Acknowledged by upstream."
},
{
"names": [
"Hanno B\u00f6ck"
],
"summary": "Acknowledged by upstream."
},
{
"names": [
"Huzaifa Sidhpurwala"
],
"organization": "Red Hat",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-2108",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-04-28T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1331402"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Memory corruption in the ASN.1 encoder",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2108"
},
{
"category": "external",
"summary": "RHBZ#1331402",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331402"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2108",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2108"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2108",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2108"
},
{
"category": "external",
"summary": "https://openssl.org/news/secadv/20160503.txt",
"url": "https://openssl.org/news/secadv/20160503.txt"
}
],
"release_date": "2016-05-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:04:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Memory corruption in the ASN.1 encoder"
},
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2016-06-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1341705"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Possible integer overflow vulnerabilities in codebase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "RHBZ#1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:04:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Possible integer overflow vulnerabilities in codebase"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1343400"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Non-constant time codepath followed for certain operations in DSA implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "RHBZ#1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178"
},
{
"category": "external",
"summary": "http://eprint.iacr.org/2016/594",
"url": "http://eprint.iacr.org/2016/594"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:04:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Non-constant time codepath followed for certain operations in DSA implementation"
},
{
"acknowledgments": [
{
"names": [
"Robert Bost"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2016-4459",
"discovery_date": "2016-05-27T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1341583"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4459"
},
{
"category": "external",
"summary": "RHBZ#1341583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341583"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4459",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4459"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4459",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4459"
}
],
"release_date": "2016-10-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:04:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 3.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:S/C:N/I:N/A:C",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute"
},
{
"cve": "CVE-2016-6808",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2016-10-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1382352"
}
],
"notes": [
{
"category": "description",
"text": "It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_jk: Buffer overflow when concatenating virtual host name and URI",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6808"
},
{
"category": "external",
"summary": "RHBZ#1382352",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1382352"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6808",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6808"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6808",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6808"
},
{
"category": "external",
"summary": "https://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.42",
"url": "https://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.42"
}
],
"release_date": "2016-10-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:04:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mod_jk: Buffer overflow when concatenating virtual host name and URI"
},
{
"cve": "CVE-2016-8612",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-10-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1387605"
}
],
"notes": [
{
"category": "description",
"text": "An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mod_cluster: Protocol parsing logic error",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8612"
},
{
"category": "external",
"summary": "RHBZ#1387605",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1387605"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8612",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8612"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8612",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8612"
}
],
"release_date": "2016-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-01-25T20:04:50+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0194"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.9,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-102.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-src-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-zip-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-35.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-src-zip-0:0.9.6-14.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.5-13.Final_redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.41-14.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-src-zip-0:2.4.1-16.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-src-zip-0:2.9.1-18.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-102.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.12.0-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-12.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-12.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "mod_cluster: Protocol parsing logic error"
}
]
}
RHSA-2017_1658
Vulnerability from csaf_redhat - Published: 2017-06-28 20:20 - Updated: 2024-12-15 18:46Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update
Severity
Important
Notes
Topic: An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.
This release includes bug fixes as well as a new release of OpenSSL. For further information, see the knowledge base article linked to in the References section. All users of Red Hat JBoss Enterprise Application Platform 6.4 on Red Hat Enterprise Linux 7 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect.
Security Fix(es):
* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)
* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)
* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)
* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.
5.9 (Medium)
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Low
It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.
5.1 (Medium)
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.
7.5 (High)
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
7.5 (High)
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
30 references
Acknowledgments
the OpenSSL project
Gear Team of Qihoo 360 Inc.
Shi Lei
Gear Team of Qihoo 360 Inc.
Shi Lei
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6 and Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.\n\nThis release includes bug fixes as well as a new release of OpenSSL. For further information, see the knowledge base article linked to in the References section. All users of Red Hat JBoss Enterprise Application Platform 6.4 on Red Hat Enterprise Linux 7 are advised to upgrade to these updated packages. The JBoss server process must be restarted for the update to take effect.\n\nSecurity Fix(es):\n\n* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)\n\n* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)\n\n* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)\n\n* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1658",
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/2688611",
"url": "https://access.redhat.com/articles/2688611"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/222023",
"url": "https://access.redhat.com/solutions/222023"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/",
"url": "https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4"
},
{
"category": "external",
"summary": "1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1658.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update",
"tracking": {
"current_release_date": "2024-12-15T18:46:14+00:00",
"generator": {
"date": "2024-12-15T18:46:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2017:1658",
"initial_release_date": "2017-06-28T20:20:17+00:00",
"revision_history": [
{
"date": "2017-06-28T20:20:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-28T20:20:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:46:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-13.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-13.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-13.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-13.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-13.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-13.jbcs.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-13.jbcs.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-13.jbcs.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-13.jbcs.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-13.jbcs.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el6?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-13.jbcs.el6?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-13.jbcs.el6?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-13.jbcs.el6?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-13.jbcs.el6?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-13.jbcs.el6?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el6?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-13.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-13.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-13.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-13.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-13.jbcs.el6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server",
"product_id": "6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server",
"product_id": "7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBEAP-6.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2016-06-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1341705"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Possible integer overflow vulnerabilities in codebase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "RHBZ#1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T20:20:17+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Possible integer overflow vulnerabilities in codebase"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1343400"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Non-constant time codepath followed for certain operations in DSA implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "RHBZ#1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178"
},
{
"category": "external",
"summary": "http://eprint.iacr.org/2016/594",
"url": "http://eprint.iacr.org/2016/594"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T20:20:17+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Non-constant time codepath followed for certain operations in DSA implementation"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc.",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-6304",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2016-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1377600"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OCSP Status Request extension unbounded memory growth",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "TLS server applications using OpenSSL versions in Red Hat Enterprise Linux 6 and 7 are only affected if they enable OCSP stapling support. Applications not enabling OCSP stapling support are not affected. Few applications implement OCSP stapling support and typically do not enable it by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "RHBZ#1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6304",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T20:20:17+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: OCSP Status Request extension unbounded memory growth"
},
{
"acknowledgments": [
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc."
}
],
"cve": "CVE-2016-8610",
"discovery_date": "2016-10-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1384743"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects applications that are compiled against OpenSSL or GnuTLS and do not allocate an extra thread for processing ClientHello messages. Nginx is affected by this issue; Apache httpd is not affected by this issue. This issue has been rated as having a security impact of Moderate. It requires an attacker to send a very large amount of SSL ALERT messages to the host network connection. This issue can also be mitigated by configuring firewalls to limit the number of connections per IP address, or use deep packet inspection to reject these type of alert packets. A future update may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8610"
},
{
"category": "external",
"summary": "RHBZ#1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8610",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610"
},
{
"category": "external",
"summary": "http://security.360.cn/cve/CVE-2016-8610",
"url": "http://security.360.cn/cve/CVE-2016-8610"
}
],
"release_date": "2016-10-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T20:20:17+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.src",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el6.x86_64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.i686",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.ppc64",
"6Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el6.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.ppc64",
"7Server-JBEAP-6.4:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS"
}
]
}
RHSA-2017_1659
Vulnerability from csaf_redhat - Published: 2017-06-28 19:59 - Updated: 2024-12-15 18:46Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update
Severity
Important
Notes
Topic: An update is now available for Red Hat JBoss Enterprise Application Platform.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.
This release includes bug fixes as well as a new release of OpenSSL that addresses a number of outstanding security flaws. For further information, see the knowledge base article linked to in the References section. All users of Red Hat JBoss Enterprise Application Platform 6.4 on Red Hat Enterprise Linux 6 are advised to upgrade to these updated packages.
Security Fix(es):
* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)
* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)
* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)
* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Low
It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.
5.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat JBoss Enterprise Application Platform 6.4
Red Hat / Red Hat JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:6.4
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
30 references
Acknowledgments
the OpenSSL project
Gear Team of Qihoo 360 Inc.
Shi Lei
Gear Team of Qihoo 360 Inc.
Shi Lei
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat JBoss Enterprise Application Platform.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server.\n\nThis release includes bug fixes as well as a new release of OpenSSL that addresses a number of outstanding security flaws. For further information, see the knowledge base article linked to in the References section. All users of Red Hat JBoss Enterprise Application Platform 6.4 on Red Hat Enterprise Linux 6 are advised to upgrade to these updated packages.\n\nSecurity Fix(es):\n\n* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)\n\n* It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178)\n\n* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections form other clients. (CVE-2016-8610)\n\n* Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1659",
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/articles/2688611",
"url": "https://access.redhat.com/articles/2688611"
},
{
"category": "external",
"summary": "https://access.redhat.com/solutions/222023",
"url": "https://access.redhat.com/solutions/222023"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/",
"url": "https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/"
},
{
"category": "external",
"summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4",
"url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform\u0026downloadType=securityPatches\u0026version=6.4"
},
{
"category": "external",
"summary": "1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1659.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update",
"tracking": {
"current_release_date": "2024-12-15T18:46:19+00:00",
"generator": {
"date": "2024-12-15T18:46:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2017:1659",
"initial_release_date": "2017-06-28T19:59:51+00:00",
"revision_history": [
{
"date": "2017-06-28T19:59:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-28T19:59:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:46:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 6.4",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 6.4",
"product_id": "Red Hat JBoss Enterprise Application Platform 6.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6.4"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2016-06-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1341705"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Possible integer overflow vulnerabilities in codebase",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "RHBZ#1341705",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2177",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2177"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2177"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Possible integer overflow vulnerabilities in codebase"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2016-06-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1343400"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Non-constant time codepath followed for certain operations in DSA implementation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "RHBZ#1343400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2178",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2178"
},
{
"category": "external",
"summary": "http://eprint.iacr.org/2016/594",
"url": "http://eprint.iacr.org/2016/594"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 1.9,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Non-constant time codepath followed for certain operations in DSA implementation"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc.",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-6304",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2016-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1377600"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OCSP Status Request extension unbounded memory growth",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "TLS server applications using OpenSSL versions in Red Hat Enterprise Linux 6 and 7 are only affected if they enable OCSP stapling support. Applications not enabling OCSP stapling support are not affected. Few applications implement OCSP stapling support and typically do not enable it by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "RHBZ#1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6304",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: OCSP Status Request extension unbounded memory growth"
},
{
"acknowledgments": [
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc."
}
],
"cve": "CVE-2016-8610",
"discovery_date": "2016-10-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1384743"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects applications that are compiled against OpenSSL or GnuTLS and do not allocate an extra thread for processing ClientHello messages. Nginx is affected by this issue; Apache httpd is not affected by this issue. This issue has been rated as having a security impact of Moderate. It requires an attacker to send a very large amount of SSL ALERT messages to the host network connection. This issue can also be mitigated by configuring firewalls to limit the number of connections per IP address, or use deep packet inspection to reject these type of alert packets. A future update may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8610"
},
{
"category": "external",
"summary": "RHBZ#1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8610",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610"
},
{
"category": "external",
"summary": "http://security.360.cn/cve/CVE-2016-8610",
"url": "http://security.360.cn/cve/CVE-2016-8610"
}
],
"release_date": "2016-10-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-28T19:59:51+00:00",
"details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
"product_ids": [
"Red Hat JBoss Enterprise Application Platform 6.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1659"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Enterprise Application Platform 6.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS"
}
]
}
SSA-412672
Vulnerability from csaf_siemens - Published: 2022-12-13 00:00 - Updated: 2022-12-13 00:00Summary
SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7
Notes
Summary: SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at:
https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
CWE-208
- Observable Timing Discrepancy
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-310
- Cryptographic Issues
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-1024
- Comparison of Incompatible Types
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-399
- Resource Management Errors
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-399
- Resource Management Errors
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-682
- Incorrect Calculation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-310
- Cryptographic Issues
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-264
- Permissions, Privileges, and Access Controls
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-264
- Permissions, Privileges, and Access Controls
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-264
- Permissions, Privileges, and Access Controls
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-264
- Permissions, Privileges, and Access Controls
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-264
- Permissions, Privileges, and Access Controls
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-399
- Resource Management Errors
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-190
- Integer Overflow or Wraparound
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-190
- Integer Overflow or Wraparound
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-399
- Resource Management Errors
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-203
- Observable Discrepancy
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-399
- Resource Management Errors
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-125
- Out-of-bounds Read
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-682
- Incorrect Calculation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-200
- Exposure of Sensitive Information to an Unauthorized Actor
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-401
- Missing Release of Memory after Effective Lifetime
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-125
- Out-of-bounds Read
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-399
- Resource Management Errors
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-399
- Resource Management Errors
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-426
- Untrusted Search Path
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-264
- Permissions, Privileges, and Access Controls
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-264
- Permissions, Privileges, and Access Controls
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-732
- Incorrect Permission Assignment for Critical Resource
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-863
- Incorrect Authorization
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-295
- Improper Certificate Validation
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-116
- Improper Encoding or Escaping of Output
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-838
- Inappropriate Encoding for Output Context
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-22
- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
CWE-190
- Integer Overflow or Wraparound
Affected products
Known affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
Siemens / SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)
|
6GK5204-0BA00-2MB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
Siemens / SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)
|
6GK5204-0BA00-2KB2
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
Siemens / SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)
|
6GK5204-0BS00-2NA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
Siemens / SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)
|
6GK5204-0BS00-3LA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
|
SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
Siemens / SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)
|
6GK5204-0BS00-3PA3
|
< V3.2.7 |
Mitigation
Mitigation
Vendor Fix
fix
|
References
3 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"notes": [
{
"category": "summary",
"text": "SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
},
{
"category": "self",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-412672.txt"
},
{
"category": "self",
"summary": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-412672.json"
}
],
"title": "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7",
"tracking": {
"current_release_date": "2022-12-13T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-412672",
"initial_release_date": "2022-12-13T00:00:00Z",
"revision_history": [
{
"date": "2022-12-13T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)",
"product_id": "1",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BA00-2MB2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)",
"product_id": "2",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BA00-2KB2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)",
"product_id": "3",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-2NA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)",
"product_id": "4",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-3LA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.2.7",
"product": {
"name": "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)",
"product_id": "5",
"product_identification_helper": {
"model_numbers": [
"6GK5204-0BS00-3PA3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2003-0190",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2003-0190"
},
{
"cve": "CVE-2003-1562",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2003-1562"
},
{
"cve": "CVE-2014-8176",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2014-8176"
},
{
"cve": "CVE-2015-0207",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0207"
},
{
"cve": "CVE-2015-0208",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0208"
},
{
"cve": "CVE-2015-0209",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0209"
},
{
"cve": "CVE-2015-0285",
"cwe": {
"id": "CWE-310",
"name": "Cryptographic Issues"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0285"
},
{
"cve": "CVE-2015-0286",
"cwe": {
"id": "CWE-1024",
"name": "Comparison of Incompatible Types"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0286"
},
{
"cve": "CVE-2015-0287",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0287"
},
{
"cve": "CVE-2015-0288",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0288"
},
{
"cve": "CVE-2015-0289",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0289"
},
{
"cve": "CVE-2015-0290",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0290"
},
{
"cve": "CVE-2015-0291",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0291"
},
{
"cve": "CVE-2015-0292",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0292"
},
{
"cve": "CVE-2015-0293",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-0293"
},
{
"cve": "CVE-2015-1787",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-1787"
},
{
"cve": "CVE-2015-1788",
"cwe": {
"id": "CWE-399",
"name": "Resource Management Errors"
},
"notes": [
{
"category": "summary",
"text": "The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-1788"
},
{
"cve": "CVE-2015-1789",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-1789"
},
{
"cve": "CVE-2015-1790",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-1790"
},
{
"cve": "CVE-2015-1791",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-1791"
},
{
"cve": "CVE-2015-1792",
"cwe": {
"id": "CWE-399",
"name": "Resource Management Errors"
},
"notes": [
{
"category": "summary",
"text": "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-1792"
},
{
"cve": "CVE-2015-1794",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-1794"
},
{
"cve": "CVE-2015-3193",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-3193"
},
{
"cve": "CVE-2015-3194",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-3194"
},
{
"cve": "CVE-2015-3195",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-3195"
},
{
"cve": "CVE-2015-3196",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-3196"
},
{
"cve": "CVE-2015-3197",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-3197"
},
{
"cve": "CVE-2015-4000",
"cwe": {
"id": "CWE-310",
"name": "Cryptographic Issues"
},
"notes": [
{
"category": "summary",
"text": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-4000"
},
{
"cve": "CVE-2015-5352",
"cwe": {
"id": "CWE-264",
"name": "Permissions, Privileges, and Access Controls"
},
"notes": [
{
"category": "summary",
"text": "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-5352"
},
{
"cve": "CVE-2015-5600",
"cwe": {
"id": "CWE-264",
"name": "Permissions, Privileges, and Access Controls"
},
"notes": [
{
"category": "summary",
"text": "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-5600"
},
{
"cve": "CVE-2015-6563",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-6563"
},
{
"cve": "CVE-2015-6564",
"cwe": {
"id": "CWE-264",
"name": "Permissions, Privileges, and Access Controls"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-6564"
},
{
"cve": "CVE-2015-6565",
"cwe": {
"id": "CWE-264",
"name": "Permissions, Privileges, and Access Controls"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-6565"
},
{
"cve": "CVE-2015-8325",
"cwe": {
"id": "CWE-264",
"name": "Permissions, Privileges, and Access Controls"
},
"notes": [
{
"category": "summary",
"text": "The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-8325"
},
{
"cve": "CVE-2016-0701",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0701"
},
{
"cve": "CVE-2016-0702",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0702"
},
{
"cve": "CVE-2016-0703",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0703"
},
{
"cve": "CVE-2016-0704",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0704"
},
{
"cve": "CVE-2016-0705",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2016-0777",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0777"
},
{
"cve": "CVE-2016-0778",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0778"
},
{
"cve": "CVE-2016-0797",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0797"
},
{
"cve": "CVE-2016-0798",
"cwe": {
"id": "CWE-399",
"name": "Resource Management Errors"
},
"notes": [
{
"category": "summary",
"text": "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0798"
},
{
"cve": "CVE-2016-0799",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0799"
},
{
"cve": "CVE-2016-0800",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A cross-protocol attack was discovered that could allow an attacker to decrypt intercepted TLS sessions by using a server supporting SSLv2 as a Bleichenbacher RSA padding oracle.\nIn order to exploit the vulnerability, the attacker must have network access to the affected devices and must be in a privileged network position.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-0800"
},
{
"cve": "CVE-2016-1907",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-1907"
},
{
"cve": "CVE-2016-1908",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-1908"
},
{
"cve": "CVE-2016-2105",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2105"
},
{
"cve": "CVE-2016-2106",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2106"
},
{
"cve": "CVE-2016-2107",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2107"
},
{
"cve": "CVE-2016-2108",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2108"
},
{
"cve": "CVE-2016-2109",
"cwe": {
"id": "CWE-399",
"name": "Resource Management Errors"
},
"notes": [
{
"category": "summary",
"text": "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2109"
},
{
"cve": "CVE-2016-2176",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2176"
},
{
"cve": "CVE-2016-2177",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2177"
},
{
"cve": "CVE-2016-2178",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2178"
},
{
"cve": "CVE-2016-2179",
"cwe": {
"id": "CWE-399",
"name": "Resource Management Errors"
},
"notes": [
{
"category": "summary",
"text": "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2179"
},
{
"cve": "CVE-2016-2180",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2180"
},
{
"cve": "CVE-2016-2181",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "summary",
"text": "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2181"
},
{
"cve": "CVE-2016-2182",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2182"
},
{
"cve": "CVE-2016-2183",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-6210",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6210"
},
{
"cve": "CVE-2016-6302",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6302"
},
{
"cve": "CVE-2016-6303",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6303"
},
{
"cve": "CVE-2016-6304",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6304"
},
{
"cve": "CVE-2016-6305",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6305"
},
{
"cve": "CVE-2016-6306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6306"
},
{
"cve": "CVE-2016-6307",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6307"
},
{
"cve": "CVE-2016-6308",
"cwe": {
"id": "CWE-399",
"name": "Resource Management Errors"
},
"notes": [
{
"category": "summary",
"text": "statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6308"
},
{
"cve": "CVE-2016-6515",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-6515"
},
{
"cve": "CVE-2016-8858",
"cwe": {
"id": "CWE-399",
"name": "Resource Management Errors"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-8858"
},
{
"cve": "CVE-2016-10009",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "summary",
"text": "Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-10009"
},
{
"cve": "CVE-2016-10010",
"cwe": {
"id": "CWE-264",
"name": "Permissions, Privileges, and Access Controls"
},
"notes": [
{
"category": "summary",
"text": "sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-10010"
},
{
"cve": "CVE-2016-10011",
"cwe": {
"id": "CWE-264",
"name": "Permissions, Privileges, and Access Controls"
},
"notes": [
{
"category": "summary",
"text": "authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-10011"
},
{
"cve": "CVE-2016-10012",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-10012"
},
{
"cve": "CVE-2017-3735",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-3735"
},
{
"cve": "CVE-2017-15906",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "summary",
"text": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-15906"
},
{
"cve": "CVE-2018-15473",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-15473"
},
{
"cve": "CVE-2018-20685",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "summary",
"text": "In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-20685"
},
{
"cve": "CVE-2019-1552",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be \u0027/usr/local\u0027. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of \u0027C:/usr/local\u0027, which may be world writable, which enables untrusted users to modify OpenSSL\u0027s default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, \u0027/usr/local/ssl\u0027 is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-1552"
},
{
"cve": "CVE-2019-6109",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-6109"
},
{
"cve": "CVE-2019-6110",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"notes": [
{
"category": "summary",
"text": "In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-6110"
},
{
"cve": "CVE-2019-6111",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-6111"
},
{
"cve": "CVE-2019-16905",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.2.7 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109814809/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-16905"
}
]
}
SUSE-SU-2016:2387-1
Vulnerability from csaf_suse - Published: 2016-09-26 14:01 - Updated: 2016-09-26 14:01Summary
Security update for openssl
Severity
Important
Notes
Title of the patch: Security update for openssl
Description of the patch:
This update for openssl fixes the following issues:
OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
Severity: High
* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)
Severity: Low
* Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
* OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)
* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
More information can be found on: https://www.openssl.org/news/secadv/20160922.txt
Also following bugs were fixed:
* update expired S/MIME certs (bsc#979475)
* improve s390x performance (bsc#982745)
* allow >= 64GB AESGCM transfers (bsc#988591)
* fix crash in print_notice (bsc#998190)
* resume reading from /dev/urandom when interrupted by a signal (bsc#995075)
Patchnames: SUSE-SLE-SAP-12-2016-1386,SUSE-SLE-SERVER-12-2016-1386
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch | — |
Vendor Fix
|
Threats
Impact
low
References
92 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for openssl fixes the following issues:\n\nOpenSSL Security Advisory [22 Sep 2016] (bsc#999665)\n\nSeverity: High\n* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)\n\nSeverity: Low\n* Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)\n* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)\n* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)\n* OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)\n* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)\n* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)\n* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)\n* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)\n* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)\n* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)\n\nMore information can be found on: https://www.openssl.org/news/secadv/20160922.txt\n\nAlso following bugs were fixed:\n* update expired S/MIME certs (bsc#979475)\n* improve s390x performance (bsc#982745)\n* allow \u003e= 64GB AESGCM transfers (bsc#988591)\n* fix crash in print_notice (bsc#998190)\n* resume reading from /dev/urandom when interrupted by a signal (bsc#995075)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-SAP-12-2016-1386,SUSE-SLE-SERVER-12-2016-1386",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2387-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:2387-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162387-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:2387-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-September/002288.html"
},
{
"category": "self",
"summary": "SUSE Bug 979475",
"url": "https://bugzilla.suse.com/979475"
},
{
"category": "self",
"summary": "SUSE Bug 982575",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "self",
"summary": "SUSE Bug 982745",
"url": "https://bugzilla.suse.com/982745"
},
{
"category": "self",
"summary": "SUSE Bug 983249",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "self",
"summary": "SUSE Bug 988591",
"url": "https://bugzilla.suse.com/988591"
},
{
"category": "self",
"summary": "SUSE Bug 990419",
"url": "https://bugzilla.suse.com/990419"
},
{
"category": "self",
"summary": "SUSE Bug 993819",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "self",
"summary": "SUSE Bug 994749",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "self",
"summary": "SUSE Bug 994844",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "self",
"summary": "SUSE Bug 995075",
"url": "https://bugzilla.suse.com/995075"
},
{
"category": "self",
"summary": "SUSE Bug 995324",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "self",
"summary": "SUSE Bug 995359",
"url": "https://bugzilla.suse.com/995359"
},
{
"category": "self",
"summary": "SUSE Bug 995377",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "self",
"summary": "SUSE Bug 998190",
"url": "https://bugzilla.suse.com/998190"
},
{
"category": "self",
"summary": "SUSE Bug 999665",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "self",
"summary": "SUSE Bug 999666",
"url": "https://bugzilla.suse.com/999666"
},
{
"category": "self",
"summary": "SUSE Bug 999668",
"url": "https://bugzilla.suse.com/999668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2177 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2178 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2179 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2180 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2181 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2182 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6302 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6303 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6304 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6306 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6306/"
}
],
"title": "Security update for openssl",
"tracking": {
"current_release_date": "2016-09-26T14:01:02Z",
"generator": {
"date": "2016-09-26T14:01:02Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:2387-1",
"initial_release_date": "2016-09-26T14:01:02Z",
"revision_history": [
{
"date": "2016-09-26T14:01:02Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-doc-1.0.1i-27.21.1.noarch",
"product": {
"name": "openssl-doc-1.0.1i-27.21.1.noarch",
"product_id": "openssl-doc-1.0.1i-27.21.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"product_id": "libopenssl1_0_0-1.0.1i-27.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"product_id": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1.0.1i-27.21.1.ppc64le",
"product": {
"name": "openssl-1.0.1i-27.21.1.ppc64le",
"product_id": "openssl-1.0.1i-27.21.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"product": {
"name": "libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"product_id": "libopenssl1_0_0-1.0.1i-27.21.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"product_id": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"product_id": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1.0.1i-27.21.1.s390x",
"product": {
"name": "openssl-1.0.1i-27.21.1.s390x",
"product_id": "openssl-1.0.1i-27.21.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"product": {
"name": "libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"product_id": "libopenssl1_0_0-1.0.1i-27.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"product_id": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1.0.1i-27.21.1.x86_64",
"product": {
"name": "openssl-1.0.1i-27.21.1.x86_64",
"product_id": "openssl-1.0.1i-27.21.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64"
},
"product_reference": "openssl-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-1.0.1i-27.21.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
},
"product_reference": "openssl-doc-1.0.1i-27.21.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-27.21.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-27.21.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x"
},
"product_reference": "libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-27.21.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le"
},
"product_reference": "openssl-1.0.1i-27.21.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-27.21.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x"
},
"product_reference": "openssl-1.0.1i-27.21.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-27.21.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64"
},
"product_reference": "openssl-1.0.1i-27.21.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-1.0.1i-27.21.1.noarch as component of SUSE Linux Enterprise Server 12-LTSS",
"product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch"
},
"product_reference": "openssl-doc-1.0.1i-27.21.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2177"
}
],
"notes": [
{
"category": "general",
"text": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2177",
"url": "https://www.suse.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "SUSE Bug 982575 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "external",
"summary": "SUSE Bug 999075 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999075"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "important"
}
],
"title": "CVE-2016-2177"
},
{
"cve": "CVE-2016-2178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2178"
}
],
"notes": [
{
"category": "general",
"text": "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2178",
"url": "https://www.suse.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 983249 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "external",
"summary": "SUSE Bug 983519 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983519"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "low"
}
],
"title": "CVE-2016-2178"
},
{
"cve": "CVE-2016-2179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2179"
}
],
"notes": [
{
"category": "general",
"text": "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2179",
"url": "https://www.suse.com/security/cve/CVE-2016-2179"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-2179"
},
{
"cve": "CVE-2016-2180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2180"
}
],
"notes": [
{
"category": "general",
"text": "The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2180",
"url": "https://www.suse.com/security/cve/CVE-2016-2180"
},
{
"category": "external",
"summary": "SUSE Bug 1003811 for CVE-2016-2180",
"url": "https://bugzilla.suse.com/1003811"
},
{
"category": "external",
"summary": "SUSE Bug 990419 for CVE-2016-2180",
"url": "https://bugzilla.suse.com/990419"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2180",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "low"
}
],
"title": "CVE-2016-2180"
},
{
"cve": "CVE-2016-2181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2181"
}
],
"notes": [
{
"category": "general",
"text": "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2181",
"url": "https://www.suse.com/security/cve/CVE-2016-2181"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994749 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "low"
}
],
"title": "CVE-2016-2181"
},
{
"cve": "CVE-2016-2182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2182"
}
],
"notes": [
{
"category": "general",
"text": "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2182",
"url": "https://www.suse.com/security/cve/CVE-2016-2182"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 993819 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995959 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/995959"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "low"
}
],
"title": "CVE-2016-2182"
},
{
"cve": "CVE-2016-2183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2183"
}
],
"notes": [
{
"category": "general",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2183",
"url": "https://www.suse.com/security/cve/CVE-2016-2183"
},
{
"category": "external",
"summary": "SUSE Bug 1001912 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1001912"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1027038 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "external",
"summary": "SUSE Bug 1034689 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1034689"
},
{
"category": "external",
"summary": "SUSE Bug 1056614 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1056614"
},
{
"category": "external",
"summary": "SUSE Bug 1171693 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1171693"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995359 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/995359"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-6302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6302"
}
],
"notes": [
{
"category": "general",
"text": "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6302",
"url": "https://www.suse.com/security/cve/CVE-2016-6302"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995324 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-6302"
},
{
"cve": "CVE-2016-6303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6303"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6303",
"url": "https://www.suse.com/security/cve/CVE-2016-6303"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995377 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "low"
}
],
"title": "CVE-2016-6303"
},
{
"cve": "CVE-2016-6304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6304"
}
],
"notes": [
{
"category": "general",
"text": "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6304",
"url": "https://www.suse.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "SUSE Bug 1001706 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1001706"
},
{
"category": "external",
"summary": "SUSE Bug 1003811 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1003811"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1005579 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1005579"
},
{
"category": "external",
"summary": "SUSE Bug 1021375 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1021375"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999666 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-6304"
},
{
"cve": "CVE-2016-6306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6306"
}
],
"notes": [
{
"category": "general",
"text": "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6306",
"url": "https://www.suse.com/security/cve/CVE-2016-6306"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999668 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.ppc64le",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.s390x",
"SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.21.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-1.0.1i-27.21.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:openssl-doc-1.0.1i-27.21.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-26T14:01:02Z",
"details": "low"
}
],
"title": "CVE-2016-6306"
}
]
}
SUSE-SU-2016:2394-1
Vulnerability from csaf_suse - Published: 2016-09-27 13:47 - Updated: 2016-09-27 13:47Summary
Security update for openssl
Severity
Important
Notes
Title of the patch: Security update for openssl
Description of the patch:
This update for openssl fixes the following issues:
OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
Severity: High
* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)
Severity: Low
* Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
* OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)
* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
More information can be found on: https://www.openssl.org/news/secadv/20160922.txt
Also following bugs were fixed:
* update expired S/MIME certs (bsc#979475)
* improve s390x performance (bsc#982745)
* allow >= 64GB AESGCM transfers (bsc#988591)
* fix crash in print_notice (bsc#998190)
* resume reading from /dev/urandom when interrupted by a signal (bsc#995075)
Patchnames: SUSE-SLE-DESKTOP-12-SP1-2016-1393,SUSE-SLE-SDK-12-SP1-2016-1393,SUSE-SLE-SERVER-12-SP1-2016-1393
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
References
92 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for openssl fixes the following issues:\n\nOpenSSL Security Advisory [22 Sep 2016] (bsc#999665)\n\nSeverity: High\n* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)\n\nSeverity: Low\n* Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)\n* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)\n* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)\n* OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)\n* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)\n* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)\n* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)\n* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)\n* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)\n* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)\n\nMore information can be found on: https://www.openssl.org/news/secadv/20160922.txt\n\nAlso following bugs were fixed:\n* update expired S/MIME certs (bsc#979475)\n* improve s390x performance (bsc#982745)\n* allow \u003e= 64GB AESGCM transfers (bsc#988591)\n* fix crash in print_notice (bsc#998190)\n* resume reading from /dev/urandom when interrupted by a signal (bsc#995075)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2016-1393,SUSE-SLE-SDK-12-SP1-2016-1393,SUSE-SLE-SERVER-12-SP1-2016-1393",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2394-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:2394-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:2394-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-September/002290.html"
},
{
"category": "self",
"summary": "SUSE Bug 979475",
"url": "https://bugzilla.suse.com/979475"
},
{
"category": "self",
"summary": "SUSE Bug 982575",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "self",
"summary": "SUSE Bug 982745",
"url": "https://bugzilla.suse.com/982745"
},
{
"category": "self",
"summary": "SUSE Bug 983249",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "self",
"summary": "SUSE Bug 988591",
"url": "https://bugzilla.suse.com/988591"
},
{
"category": "self",
"summary": "SUSE Bug 990419",
"url": "https://bugzilla.suse.com/990419"
},
{
"category": "self",
"summary": "SUSE Bug 993819",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "self",
"summary": "SUSE Bug 994749",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "self",
"summary": "SUSE Bug 994844",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "self",
"summary": "SUSE Bug 995075",
"url": "https://bugzilla.suse.com/995075"
},
{
"category": "self",
"summary": "SUSE Bug 995324",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "self",
"summary": "SUSE Bug 995359",
"url": "https://bugzilla.suse.com/995359"
},
{
"category": "self",
"summary": "SUSE Bug 995377",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "self",
"summary": "SUSE Bug 998190",
"url": "https://bugzilla.suse.com/998190"
},
{
"category": "self",
"summary": "SUSE Bug 999665",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "self",
"summary": "SUSE Bug 999666",
"url": "https://bugzilla.suse.com/999666"
},
{
"category": "self",
"summary": "SUSE Bug 999668",
"url": "https://bugzilla.suse.com/999668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2177 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2178 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2179 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2180 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2181 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2182 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6302 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6303 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6304 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6306 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6306/"
}
],
"title": "Security update for openssl",
"tracking": {
"current_release_date": "2016-09-27T13:47:59Z",
"generator": {
"date": "2016-09-27T13:47:59Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:2394-1",
"initial_release_date": "2016-09-27T13:47:59Z",
"revision_history": [
{
"date": "2016-09-27T13:47:59Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-doc-1.0.1i-52.1.noarch",
"product": {
"name": "openssl-doc-1.0.1i-52.1.noarch",
"product_id": "openssl-doc-1.0.1i-52.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-devel-1.0.1i-52.1.ppc64le",
"product": {
"name": "libopenssl-devel-1.0.1i-52.1.ppc64le",
"product_id": "libopenssl-devel-1.0.1i-52.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"product_id": "libopenssl1_0_0-1.0.1i-52.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"product_id": "libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1.0.1i-52.1.ppc64le",
"product": {
"name": "openssl-1.0.1i-52.1.ppc64le",
"product_id": "openssl-1.0.1i-52.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-devel-1.0.1i-52.1.s390x",
"product": {
"name": "libopenssl-devel-1.0.1i-52.1.s390x",
"product_id": "libopenssl-devel-1.0.1i-52.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.1i-52.1.s390x",
"product": {
"name": "libopenssl1_0_0-1.0.1i-52.1.s390x",
"product_id": "libopenssl1_0_0-1.0.1i-52.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"product_id": "libopenssl1_0_0-32bit-1.0.1i-52.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"product_id": "libopenssl1_0_0-hmac-1.0.1i-52.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1.0.1i-52.1.s390x",
"product": {
"name": "openssl-1.0.1i-52.1.s390x",
"product_id": "openssl-1.0.1i-52.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.1i-52.1.x86_64",
"product": {
"name": "libopenssl1_0_0-1.0.1i-52.1.x86_64",
"product_id": "libopenssl1_0_0-1.0.1i-52.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"product_id": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1.0.1i-52.1.x86_64",
"product": {
"name": "openssl-1.0.1i-52.1.x86_64",
"product_id": "openssl-1.0.1i-52.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-devel-1.0.1i-52.1.x86_64",
"product": {
"name": "libopenssl-devel-1.0.1i-52.1.x86_64",
"product_id": "libopenssl-devel-1.0.1i-52.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64"
},
"product_reference": "openssl-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-1.0.1i-52.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le"
},
"product_reference": "libopenssl-devel-1.0.1i-52.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl-devel-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl-devel-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-52.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-52.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le"
},
"product_reference": "openssl-1.0.1i-52.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x"
},
"product_reference": "openssl-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64"
},
"product_reference": "openssl-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-1.0.1i-52.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch"
},
"product_reference": "openssl-doc-1.0.1i-52.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-52.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le"
},
"product_reference": "openssl-1.0.1i-52.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-52.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x"
},
"product_reference": "openssl-1.0.1i-52.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1.0.1i-52.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64"
},
"product_reference": "openssl-1.0.1i-52.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-1.0.1i-52.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch"
},
"product_reference": "openssl-doc-1.0.1i-52.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2177"
}
],
"notes": [
{
"category": "general",
"text": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2177",
"url": "https://www.suse.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "SUSE Bug 982575 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "external",
"summary": "SUSE Bug 999075 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999075"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "important"
}
],
"title": "CVE-2016-2177"
},
{
"cve": "CVE-2016-2178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2178"
}
],
"notes": [
{
"category": "general",
"text": "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2178",
"url": "https://www.suse.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 983249 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "external",
"summary": "SUSE Bug 983519 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983519"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "low"
}
],
"title": "CVE-2016-2178"
},
{
"cve": "CVE-2016-2179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2179"
}
],
"notes": [
{
"category": "general",
"text": "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2179",
"url": "https://www.suse.com/security/cve/CVE-2016-2179"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "moderate"
}
],
"title": "CVE-2016-2179"
},
{
"cve": "CVE-2016-2180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2180"
}
],
"notes": [
{
"category": "general",
"text": "The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2180",
"url": "https://www.suse.com/security/cve/CVE-2016-2180"
},
{
"category": "external",
"summary": "SUSE Bug 1003811 for CVE-2016-2180",
"url": "https://bugzilla.suse.com/1003811"
},
{
"category": "external",
"summary": "SUSE Bug 990419 for CVE-2016-2180",
"url": "https://bugzilla.suse.com/990419"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2180",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "low"
}
],
"title": "CVE-2016-2180"
},
{
"cve": "CVE-2016-2181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2181"
}
],
"notes": [
{
"category": "general",
"text": "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2181",
"url": "https://www.suse.com/security/cve/CVE-2016-2181"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994749 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "low"
}
],
"title": "CVE-2016-2181"
},
{
"cve": "CVE-2016-2182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2182"
}
],
"notes": [
{
"category": "general",
"text": "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2182",
"url": "https://www.suse.com/security/cve/CVE-2016-2182"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 993819 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995959 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/995959"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "low"
}
],
"title": "CVE-2016-2182"
},
{
"cve": "CVE-2016-2183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2183"
}
],
"notes": [
{
"category": "general",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2183",
"url": "https://www.suse.com/security/cve/CVE-2016-2183"
},
{
"category": "external",
"summary": "SUSE Bug 1001912 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1001912"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1027038 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "external",
"summary": "SUSE Bug 1034689 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1034689"
},
{
"category": "external",
"summary": "SUSE Bug 1056614 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1056614"
},
{
"category": "external",
"summary": "SUSE Bug 1171693 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1171693"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995359 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/995359"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "moderate"
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-6302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6302"
}
],
"notes": [
{
"category": "general",
"text": "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6302",
"url": "https://www.suse.com/security/cve/CVE-2016-6302"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995324 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "moderate"
}
],
"title": "CVE-2016-6302"
},
{
"cve": "CVE-2016-6303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6303"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6303",
"url": "https://www.suse.com/security/cve/CVE-2016-6303"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995377 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "low"
}
],
"title": "CVE-2016-6303"
},
{
"cve": "CVE-2016-6304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6304"
}
],
"notes": [
{
"category": "general",
"text": "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6304",
"url": "https://www.suse.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "SUSE Bug 1001706 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1001706"
},
{
"category": "external",
"summary": "SUSE Bug 1003811 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1003811"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1005579 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1005579"
},
{
"category": "external",
"summary": "SUSE Bug 1021375 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1021375"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999666 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "moderate"
}
],
"title": "CVE-2016-6304"
},
{
"cve": "CVE-2016-6306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6306"
}
],
"notes": [
{
"category": "general",
"text": "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6306",
"url": "https://www.suse.com/security/cve/CVE-2016-6306"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999668 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-52.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-52.1.noarch",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.ppc64le",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.s390x",
"SUSE Linux Enterprise Software Development Kit 12 SP1:libopenssl-devel-1.0.1i-52.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-09-27T13:47:59Z",
"details": "low"
}
],
"title": "CVE-2016-6306"
}
]
}
SUSE-SU-2016:2458-1
Vulnerability from csaf_suse - Published: 2016-10-05 12:17 - Updated: 2016-10-05 12:17Summary
Security update for openssl
Severity
Important
Notes
Title of the patch: Security update for openssl
Description of the patch:
This update for openssl fixes the following issues:
OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
Severity: High
* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)
Severity: Low
* Pointer arithmetic undefined behavior (CVE-2016-2177) (bsc#982575)
* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)
* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
More information can be found on: https://www.openssl.org/news/secadv/20160922.txt
Bugs fixed:
* Update expired S/MIME certs (bsc#979475)
* Fix crash in print_notice (bsc#998190)
* Resume reading from /dev/urandom when interrupted by a signal (bsc#995075)
Patchnames: sdksp4-openssl-12774,sleclo50sp3-openssl-12774,sleman21-openssl-12774,slemap21-openssl-12774,sleposp3-openssl-12774,slessp2-openssl-12774,slessp3-openssl-12774,slessp4-openssl-12774,slestso13-openssl-12774
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
153 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
References
84 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for openssl fixes the following issues:\n\nOpenSSL Security Advisory [22 Sep 2016] (bsc#999665)\n\nSeverity: High\n* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)\n\nSeverity: Low\n* Pointer arithmetic undefined behavior (CVE-2016-2177) (bsc#982575)\n* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)\n* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)\n* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)\n* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)\n* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)\n* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)\n* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)\n* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)\n\nMore information can be found on: https://www.openssl.org/news/secadv/20160922.txt\n\nBugs fixed:\n* Update expired S/MIME certs (bsc#979475)\n* Fix crash in print_notice (bsc#998190)\n* Resume reading from /dev/urandom when interrupted by a signal (bsc#995075)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-openssl-12774,sleclo50sp3-openssl-12774,sleman21-openssl-12774,slemap21-openssl-12774,sleposp3-openssl-12774,slessp2-openssl-12774,slessp3-openssl-12774,slessp4-openssl-12774,slestso13-openssl-12774",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2458-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:2458-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:2458-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-October/002309.html"
},
{
"category": "self",
"summary": "SUSE Bug 979475",
"url": "https://bugzilla.suse.com/979475"
},
{
"category": "self",
"summary": "SUSE Bug 982575",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "self",
"summary": "SUSE Bug 983249",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "self",
"summary": "SUSE Bug 993819",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "self",
"summary": "SUSE Bug 994749",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "self",
"summary": "SUSE Bug 994844",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "self",
"summary": "SUSE Bug 995075",
"url": "https://bugzilla.suse.com/995075"
},
{
"category": "self",
"summary": "SUSE Bug 995324",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "self",
"summary": "SUSE Bug 995359",
"url": "https://bugzilla.suse.com/995359"
},
{
"category": "self",
"summary": "SUSE Bug 995377",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "self",
"summary": "SUSE Bug 998190",
"url": "https://bugzilla.suse.com/998190"
},
{
"category": "self",
"summary": "SUSE Bug 999665",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "self",
"summary": "SUSE Bug 999666",
"url": "https://bugzilla.suse.com/999666"
},
{
"category": "self",
"summary": "SUSE Bug 999668",
"url": "https://bugzilla.suse.com/999668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2177 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2178 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2179 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2181 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2182 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6302 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6303 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6304 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6306 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6306/"
}
],
"title": "Security update for openssl",
"tracking": {
"current_release_date": "2016-10-05T12:17:15Z",
"generator": {
"date": "2016-10-05T12:17:15Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:2458-1",
"initial_release_date": "2016-10-05T12:17:15Z",
"revision_history": [
{
"date": "2016-10-05T12:17:15Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-devel-0.9.8j-0.102.2.i586",
"product": {
"name": "libopenssl-devel-0.9.8j-0.102.2.i586",
"product_id": "libopenssl-devel-0.9.8j-0.102.2.i586"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"product": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"product_id": "libopenssl0_9_8-0.9.8j-0.102.2.i586"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"product": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"product_id": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586"
}
},
{
"category": "product_version",
"name": "openssl-0.9.8j-0.102.2.i586",
"product": {
"name": "openssl-0.9.8j-0.102.2.i586",
"product_id": "openssl-0.9.8j-0.102.2.i586"
}
},
{
"category": "product_version",
"name": "openssl-doc-0.9.8j-0.102.2.i586",
"product": {
"name": "openssl-doc-0.9.8j-0.102.2.i586",
"product_id": "openssl-doc-0.9.8j-0.102.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-devel-0.9.8j-0.102.2.ia64",
"product": {
"name": "libopenssl-devel-0.9.8j-0.102.2.ia64",
"product_id": "libopenssl-devel-0.9.8j-0.102.2.ia64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"product": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"product_id": "libopenssl0_9_8-0.9.8j-0.102.2.ia64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"product": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"product_id": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"product": {
"name": "libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"product_id": "libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64"
}
},
{
"category": "product_version",
"name": "openssl-0.9.8j-0.102.2.ia64",
"product": {
"name": "openssl-0.9.8j-0.102.2.ia64",
"product_id": "openssl-0.9.8j-0.102.2.ia64"
}
},
{
"category": "product_version",
"name": "openssl-doc-0.9.8j-0.102.2.ia64",
"product": {
"name": "openssl-doc-0.9.8j-0.102.2.ia64",
"product_id": "openssl-doc-0.9.8j-0.102.2.ia64"
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-devel-0.9.8j-0.102.2.ppc64",
"product": {
"name": "libopenssl-devel-0.9.8j-0.102.2.ppc64",
"product_id": "libopenssl-devel-0.9.8j-0.102.2.ppc64"
}
},
{
"category": "product_version",
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"product": {
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"product_id": "libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"product": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"product_id": "libopenssl0_9_8-0.9.8j-0.102.2.ppc64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"product": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"product_id": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"product": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"product_id": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"product": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"product_id": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64"
}
},
{
"category": "product_version",
"name": "openssl-0.9.8j-0.102.2.ppc64",
"product": {
"name": "openssl-0.9.8j-0.102.2.ppc64",
"product_id": "openssl-0.9.8j-0.102.2.ppc64"
}
},
{
"category": "product_version",
"name": "openssl-doc-0.9.8j-0.102.2.ppc64",
"product": {
"name": "openssl-doc-0.9.8j-0.102.2.ppc64",
"product_id": "openssl-doc-0.9.8j-0.102.2.ppc64"
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-devel-0.9.8j-0.102.2.s390x",
"product": {
"name": "libopenssl-devel-0.9.8j-0.102.2.s390x",
"product_id": "libopenssl-devel-0.9.8j-0.102.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"product": {
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"product_id": "libopenssl-devel-32bit-0.9.8j-0.102.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"product": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"product_id": "libopenssl0_9_8-0.9.8j-0.102.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"product": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"product_id": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"product": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"product_id": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"product": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"product_id": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x"
}
},
{
"category": "product_version",
"name": "openssl-0.9.8j-0.102.2.s390x",
"product": {
"name": "openssl-0.9.8j-0.102.2.s390x",
"product_id": "openssl-0.9.8j-0.102.2.s390x"
}
},
{
"category": "product_version",
"name": "openssl-doc-0.9.8j-0.102.2.s390x",
"product": {
"name": "openssl-doc-0.9.8j-0.102.2.s390x",
"product_id": "openssl-doc-0.9.8j-0.102.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"product": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"product_id": "libopenssl-devel-0.9.8j-0.102.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"product": {
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"product_id": "libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"product": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"product_id": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"product": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"product_id": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"product": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"product_id": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"product": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"product_id": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-0.9.8j-0.102.2.x86_64",
"product": {
"name": "openssl-0.9.8j-0.102.2.x86_64",
"product_id": "openssl-0.9.8j-0.102.2.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-doc-0.9.8j-0.102.2.x86_64",
"product": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64",
"product_id": "openssl-doc-0.9.8j-0.102.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE OpenStack Cloud 5",
"product": {
"name": "SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:cloud:5"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager 2.1",
"product": {
"name": "SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:2.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 2.1",
"product": {
"name": "SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:2.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product": {
"name": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-pos:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp3:teradata"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Studio Onsite 1.3",
"product": {
"name": "SUSE Studio Onsite 1.3",
"product_id": "SUSE Studio Onsite 1.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-studioonsite:1.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE OpenStack Cloud 5",
"product_id": "SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE OpenStack Cloud 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.s390x as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.s390x as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.s390x as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE Manager 2.1",
"product_id": "SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE Manager Proxy 2.1",
"product_id": "SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Manager Proxy 2.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
"product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64"
},
"product_reference": "libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64"
},
"product_reference": "openssl-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64"
},
"product_reference": "openssl-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64"
},
"product_reference": "libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64"
},
"product_reference": "openssl-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64"
},
"product_reference": "openssl-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.ia64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.ia64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.ppc64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.ppc64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.s390x as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-doc-0.9.8j-0.102.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64"
},
"product_reference": "openssl-doc-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-devel-0.9.8j-0.102.2.x86_64 as component of SUSE Studio Onsite 1.3",
"product_id": "SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
},
"product_reference": "libopenssl-devel-0.9.8j-0.102.2.x86_64",
"relates_to_product_reference": "SUSE Studio Onsite 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2177"
}
],
"notes": [
{
"category": "general",
"text": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2177",
"url": "https://www.suse.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "SUSE Bug 982575 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "external",
"summary": "SUSE Bug 999075 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999075"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "important"
}
],
"title": "CVE-2016-2177"
},
{
"cve": "CVE-2016-2178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2178"
}
],
"notes": [
{
"category": "general",
"text": "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2178",
"url": "https://www.suse.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 983249 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "external",
"summary": "SUSE Bug 983519 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983519"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "low"
}
],
"title": "CVE-2016-2178"
},
{
"cve": "CVE-2016-2179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2179"
}
],
"notes": [
{
"category": "general",
"text": "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2179",
"url": "https://www.suse.com/security/cve/CVE-2016-2179"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-2179"
},
{
"cve": "CVE-2016-2181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2181"
}
],
"notes": [
{
"category": "general",
"text": "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2181",
"url": "https://www.suse.com/security/cve/CVE-2016-2181"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994749 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "low"
}
],
"title": "CVE-2016-2181"
},
{
"cve": "CVE-2016-2182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2182"
}
],
"notes": [
{
"category": "general",
"text": "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2182",
"url": "https://www.suse.com/security/cve/CVE-2016-2182"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 993819 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995959 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/995959"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "low"
}
],
"title": "CVE-2016-2182"
},
{
"cve": "CVE-2016-2183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2183"
}
],
"notes": [
{
"category": "general",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2183",
"url": "https://www.suse.com/security/cve/CVE-2016-2183"
},
{
"category": "external",
"summary": "SUSE Bug 1001912 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1001912"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1027038 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "external",
"summary": "SUSE Bug 1034689 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1034689"
},
{
"category": "external",
"summary": "SUSE Bug 1056614 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1056614"
},
{
"category": "external",
"summary": "SUSE Bug 1171693 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1171693"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995359 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/995359"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-6302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6302"
}
],
"notes": [
{
"category": "general",
"text": "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6302",
"url": "https://www.suse.com/security/cve/CVE-2016-6302"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995324 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-6302"
},
{
"cve": "CVE-2016-6303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6303"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6303",
"url": "https://www.suse.com/security/cve/CVE-2016-6303"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995377 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "low"
}
],
"title": "CVE-2016-6303"
},
{
"cve": "CVE-2016-6304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6304"
}
],
"notes": [
{
"category": "general",
"text": "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6304",
"url": "https://www.suse.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "SUSE Bug 1001706 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1001706"
},
{
"category": "external",
"summary": "SUSE Bug 1003811 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1003811"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1005579 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1005579"
},
{
"category": "external",
"summary": "SUSE Bug 1021375 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1021375"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999666 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-6304"
},
{
"cve": "CVE-2016-6306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6306"
}
],
"notes": [
{
"category": "general",
"text": "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6306",
"url": "https://www.suse.com/security/cve/CVE-2016-6306"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999668 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP2-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-LTSS:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP3-TERADATA:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:libopenssl0_9_8-x86-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ia64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.ppc64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.s390x",
"SUSE Linux Enterprise Software Development Kit 11 SP4:libopenssl-devel-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.s390x",
"SUSE Manager 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-0.9.8j-0.102.2.x86_64",
"SUSE Manager Proxy 2.1:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl-devel-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-0.9.8j-0.102.2.x86_64",
"SUSE OpenStack Cloud 5:openssl-doc-0.9.8j-0.102.2.x86_64",
"SUSE Studio Onsite 1.3:libopenssl-devel-0.9.8j-0.102.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-05T12:17:15Z",
"details": "low"
}
],
"title": "CVE-2016-6306"
}
]
}
SUSE-SU-2016:2468-1
Vulnerability from csaf_suse - Published: 2016-10-06 14:46 - Updated: 2016-10-06 14:46Summary
Security update for compat-openssl098
Severity
Important
Notes
Title of the patch: Security update for compat-openssl098
Description of the patch:
This update for compat-openssl098 fixes the following issues:
OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)
Severity: High
* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)
Severity: Low
* Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)
* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)
More information can be found on: https://www.openssl.org/news/secadv/20160922.txt
Bugs fixed:
* update expired S/MIME certs (bsc#979475)
* fix crash in print_notice (bsc#998190)
* resume reading from /dev/urandom when interrupted by a signal (bsc#995075)
Patchnames: SUSE-SLE-DESKTOP-12-SP1-2016-1441,SUSE-SLE-Module-Legacy-12-2016-1441,SUSE-SLE-SAP-12-SP1-2016-1441
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.9 (Medium)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
9.8 (Critical)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
References
84 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for compat-openssl098",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update for compat-openssl098 fixes the following issues:\n\nOpenSSL Security Advisory [22 Sep 2016] (bsc#999665)\n\nSeverity: High\n* OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)\n\nSeverity: Low\n* Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)\n* Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)\n* DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)\n* DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)\n* OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)\n* Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)\n* Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)\n* OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)\n* Certificate message OOB reads (CVE-2016-6306) (bsc#999668)\n\nMore information can be found on: https://www.openssl.org/news/secadv/20160922.txt\n\nBugs fixed:\n* update expired S/MIME certs (bsc#979475)\n* fix crash in print_notice (bsc#998190)\n* resume reading from /dev/urandom when interrupted by a signal (bsc#995075)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2016-1441,SUSE-SLE-Module-Legacy-12-2016-1441,SUSE-SLE-SAP-12-SP1-2016-1441",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2468-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:2468-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:2468-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-October/002313.html"
},
{
"category": "self",
"summary": "SUSE Bug 979475",
"url": "https://bugzilla.suse.com/979475"
},
{
"category": "self",
"summary": "SUSE Bug 982575",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "self",
"summary": "SUSE Bug 983249",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "self",
"summary": "SUSE Bug 993819",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "self",
"summary": "SUSE Bug 994749",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "self",
"summary": "SUSE Bug 994844",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "self",
"summary": "SUSE Bug 995075",
"url": "https://bugzilla.suse.com/995075"
},
{
"category": "self",
"summary": "SUSE Bug 995324",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "self",
"summary": "SUSE Bug 995359",
"url": "https://bugzilla.suse.com/995359"
},
{
"category": "self",
"summary": "SUSE Bug 995377",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "self",
"summary": "SUSE Bug 998190",
"url": "https://bugzilla.suse.com/998190"
},
{
"category": "self",
"summary": "SUSE Bug 999665",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "self",
"summary": "SUSE Bug 999666",
"url": "https://bugzilla.suse.com/999666"
},
{
"category": "self",
"summary": "SUSE Bug 999668",
"url": "https://bugzilla.suse.com/999668"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2177 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2178 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2179 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2181 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2181/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2182 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2183 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6302 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6302/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6303 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6303/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6304 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6306 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6306/"
}
],
"title": "Security update for compat-openssl098",
"tracking": {
"current_release_date": "2016-10-06T14:46:15Z",
"generator": {
"date": "2016-10-06T14:46:15Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:2468-1",
"initial_release_date": "2016-10-06T14:46:15Z",
"revision_history": [
{
"date": "2016-10-06T14:46:15Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl0_9_8-0.9.8j-102.1.s390x",
"product": {
"name": "libopenssl0_9_8-0.9.8j-102.1.s390x",
"product_id": "libopenssl0_9_8-0.9.8j-102.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"product": {
"name": "libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"product_id": "libopenssl0_9_8-32bit-0.9.8j-102.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl0_9_8-0.9.8j-102.1.x86_64",
"product": {
"name": "libopenssl0_9_8-0.9.8j-102.1.x86_64",
"product_id": "libopenssl0_9_8-0.9.8j-102.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"product": {
"name": "libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"product_id": "libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Legacy 12",
"product": {
"name": "SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-legacy:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-102.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-102.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-102.1.s390x as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x"
},
"product_reference": "libopenssl0_9_8-0.9.8j-102.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-102.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-102.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-102.1.s390x as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 12",
"product_id": "SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64"
},
"product_reference": "libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl0_9_8-0.9.8j-102.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
},
"product_reference": "libopenssl0_9_8-0.9.8j-102.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2177"
}
],
"notes": [
{
"category": "general",
"text": "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2177",
"url": "https://www.suse.com/security/cve/CVE-2016-2177"
},
{
"category": "external",
"summary": "SUSE Bug 982575 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/982575"
},
{
"category": "external",
"summary": "SUSE Bug 999075 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999075"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2177",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "important"
}
],
"title": "CVE-2016-2177"
},
{
"cve": "CVE-2016-2178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2178"
}
],
"notes": [
{
"category": "general",
"text": "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2178",
"url": "https://www.suse.com/security/cve/CVE-2016-2178"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 983249 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983249"
},
{
"category": "external",
"summary": "SUSE Bug 983519 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/983519"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2178",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "low"
}
],
"title": "CVE-2016-2178"
},
{
"cve": "CVE-2016-2179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2179"
}
],
"notes": [
{
"category": "general",
"text": "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2179",
"url": "https://www.suse.com/security/cve/CVE-2016-2179"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2179",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-2179"
},
{
"cve": "CVE-2016-2181",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2181"
}
],
"notes": [
{
"category": "general",
"text": "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2181",
"url": "https://www.suse.com/security/cve/CVE-2016-2181"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994749 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994749"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2181",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "low"
}
],
"title": "CVE-2016-2181"
},
{
"cve": "CVE-2016-2182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2182"
}
],
"notes": [
{
"category": "general",
"text": "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2182",
"url": "https://www.suse.com/security/cve/CVE-2016-2182"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 993819 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/993819"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995959 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/995959"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-2182",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "low"
}
],
"title": "CVE-2016-2182"
},
{
"cve": "CVE-2016-2183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2183"
}
],
"notes": [
{
"category": "general",
"text": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2183",
"url": "https://www.suse.com/security/cve/CVE-2016-2183"
},
{
"category": "external",
"summary": "SUSE Bug 1001912 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1001912"
},
{
"category": "external",
"summary": "SUSE Bug 1024218 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1024218"
},
{
"category": "external",
"summary": "SUSE Bug 1027038 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1027038"
},
{
"category": "external",
"summary": "SUSE Bug 1034689 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1034689"
},
{
"category": "external",
"summary": "SUSE Bug 1056614 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1056614"
},
{
"category": "external",
"summary": "SUSE Bug 1171693 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/1171693"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995359 for CVE-2016-2183",
"url": "https://bugzilla.suse.com/995359"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-2183"
},
{
"cve": "CVE-2016-6302",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6302"
}
],
"notes": [
{
"category": "general",
"text": "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6302",
"url": "https://www.suse.com/security/cve/CVE-2016-6302"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995324 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/995324"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6302",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-6302"
},
{
"cve": "CVE-2016-6303",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6303"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6303",
"url": "https://www.suse.com/security/cve/CVE-2016-6303"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1115893 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/1115893"
},
{
"category": "external",
"summary": "SUSE Bug 994844 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/994844"
},
{
"category": "external",
"summary": "SUSE Bug 995377 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/995377"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6303",
"url": "https://bugzilla.suse.com/999665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "low"
}
],
"title": "CVE-2016-6303"
},
{
"cve": "CVE-2016-6304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6304"
}
],
"notes": [
{
"category": "general",
"text": "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6304",
"url": "https://www.suse.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "SUSE Bug 1001706 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1001706"
},
{
"category": "external",
"summary": "SUSE Bug 1003811 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1003811"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 1005579 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1005579"
},
{
"category": "external",
"summary": "SUSE Bug 1021375 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/1021375"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999666 for CVE-2016-6304",
"url": "https://bugzilla.suse.com/999666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "moderate"
}
],
"title": "CVE-2016-6304"
},
{
"cve": "CVE-2016-6306",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6306"
}
],
"notes": [
{
"category": "general",
"text": "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6306",
"url": "https://www.suse.com/security/cve/CVE-2016-6306"
},
{
"category": "external",
"summary": "SUSE Bug 1004104 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/1004104"
},
{
"category": "external",
"summary": "SUSE Bug 999665 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999665"
},
{
"category": "external",
"summary": "SUSE Bug 999668 for CVE-2016-6306",
"url": "https://bugzilla.suse.com/999668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.s390x",
"SUSE Linux Enterprise Module for Legacy 12:libopenssl0_9_8-32bit-0.9.8j-102.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl0_9_8-0.9.8j-102.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-10-06T14:46:15Z",
"details": "low"
}
],
"title": "CVE-2016-6306"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…