Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2016-6305
Vulnerability from cvelistv5
Published
2016-09-26 00:00
Modified
2024-08-06 01:29
Severity ?
EPSS score ?
Summary
The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T01:29:19.058Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://www.openssl.org/news/secadv/20160922.txt", }, { tags: [ "x_transferred", ], url: "https://www.tenable.com/security/tns-2016-20", }, { tags: [ "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { name: "1036879", tags: [ "vdb-entry", "x_transferred", ], url: "http://www.securitytracker.com/id/1036879", }, { name: "GLSA-201612-16", tags: [ "vendor-advisory", "x_transferred", ], url: "https://security.gentoo.org/glsa/201612-16", }, { tags: [ "x_transferred", ], url: "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9", }, { tags: [ "x_transferred", ], url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { tags: [ "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { tags: [ "x_transferred", ], url: "https://www.tenable.com/security/tns-2016-16", }, { tags: [ "x_transferred", ], url: "https://www.tenable.com/security/tns-2016-21", }, { name: "93149", tags: [ "vdb-entry", "x_transferred", ], url: "http://www.securityfocus.com/bid/93149", }, { tags: [ "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { tags: [ "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { tags: [ "x_transferred", ], url: "https://github.com/openssl/openssl/issues/1563", }, { tags: [ "x_transferred", ], url: "https://bto.bluecoat.com/security-advisory/sa132", }, { tags: [ "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { tags: [ "x_transferred", ], url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", }, { tags: [ "x_transferred", ], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2016-09-22T00:00:00", descriptions: [ { lang: "en", value: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2022-12-13T00:00:00", orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", shortName: "redhat", }, references: [ { url: "https://www.openssl.org/news/secadv/20160922.txt", }, { url: "https://www.tenable.com/security/tns-2016-20", }, { url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { name: "1036879", tags: [ "vdb-entry", ], url: "http://www.securitytracker.com/id/1036879", }, { name: "GLSA-201612-16", tags: [ "vendor-advisory", ], url: "https://security.gentoo.org/glsa/201612-16", }, { url: "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9", }, { url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { url: "https://www.tenable.com/security/tns-2016-16", }, { url: "https://www.tenable.com/security/tns-2016-21", }, { name: "93149", tags: [ "vdb-entry", ], url: "http://www.securityfocus.com/bid/93149", }, { url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { url: "https://github.com/openssl/openssl/issues/1563", }, { url: "https://bto.bluecoat.com/security-advisory/sa132", }, { url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", }, { url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, ], }, }, cveMetadata: { assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", assignerShortName: "redhat", cveId: "CVE-2016-6305", datePublished: "2016-09-26T00:00:00", dateReserved: "2016-07-26T00:00:00", dateUpdated: "2024-08-06T01:29:19.058Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { fkie_nvd: { configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"73104834-5810-48DD-9B97-549D223853F1\"}]}]}]", descriptions: "[{\"lang\": \"en\", \"value\": \"The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.\"}, {\"lang\": \"es\", \"value\": \"La funci\\u00f3n ssl3_read_bytes en record/rec_layer_s3.c en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a permite a atacantes remotos provocar una denegaci\\u00f3n de servicio (bucle infinito) desencadenando un registro de longitud cero en una llamada SSL_peek.\"}]", id: "CVE-2016-6305", lastModified: "2024-11-21T02:55:51.900", metrics: "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", published: "2016-09-26T19:59:01.597", references: "[{\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/93149\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securitytracker.com/id/1036879\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://bto.bluecoat.com/security-advisory/sa132\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://github.com/openssl/openssl/issues/1563\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Exploit\", \"Issue Tracking\"]}, {\"url\": \"https://security.gentoo.org/glsa/201612-16\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.openssl.org/news/secadv/20160922.txt\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.tenable.com/security/tns-2016-16\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-20\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-21\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/93149\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1036879\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://bto.bluecoat.com/security-advisory/sa132\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://github.com/openssl/openssl/issues/1563\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\"]}, {\"url\": \"https://security.gentoo.org/glsa/201612-16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.openssl.org/news/secadv/20160922.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.tenable.com/security/tns-2016-16\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-20\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.tenable.com/security/tns-2016-21\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]", sourceIdentifier: "secalert@redhat.com", vulnStatus: "Modified", weaknesses: "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]", }, nvd: "{\"cve\":{\"id\":\"CVE-2016-6305\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2016-09-26T19:59:01.597\",\"lastModified\":\"2024-11-21T02:55:51.900\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.\"},{\"lang\":\"es\",\"value\":\"La función ssl3_read_bytes en record/rec_layer_s3.c en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a permite a atacantes remotos provocar una denegación de servicio (bucle infinito) desencadenando un registro de longitud cero en una llamada SSL_peek.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73104834-5810-48DD-9B97-549D223853F1\"}]}]}],\"references\":[{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/93149\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id/1036879\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa132\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://github.com/openssl/openssl/issues/1563\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Issue Tracking\"]},{\"url\":\"https://security.gentoo.org/glsa/201612-16\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.openssl.org/news/secadv/20160922.txt\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2016-16\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.tenable.com/security/tns-2016-20\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://www.tenable.com/security/tns-2016-21\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21995039\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/93149\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1036879\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bto.bluecoat.com/security-advisory/sa132\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://github.com/openssl/openssl/issues/1563\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\"]},{\"url\":\"https://security.gentoo.org/glsa/201612-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.openssl.org/news/secadv/20160922.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2016-16\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.tenable.com/security/tns-2016-20\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.tenable.com/security/tns-2016-21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
ICSA-22-349-21
Vulnerability from csaf_cisa
Published
2022-12-13 00:00
Modified
2022-12-13 00:00
Summary
Siemens SCALANCE X-200RNA Switch Devices
Notes
Summary
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at:
https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{ document: { acknowledgments: [ { organization: "Siemens ProductCERT", summary: "reporting these vulnerabilities to CISA.", }, ], category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Disclosure is not limited", tlp: { label: "WHITE", url: "https://us-cert.cisa.gov/tlp/", }, }, notes: [ { category: "summary", text: "SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.", title: "Summary", }, { category: "general", text: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity", title: "General Recommendations", }, { category: "general", text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", title: "Additional Resources", }, { category: "legal_disclaimer", text: "Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", title: "Terms of Use", }, { category: "legal_disclaimer", text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", title: "Legal Notice", }, { category: "other", text: "This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.", title: "Advisory Conversion Disclaimer", }, { category: "other", text: "Multiple", title: "Critical infrastructure sectors", }, { category: "other", text: "Worldwide", title: "Countries/areas deployed", }, { category: "other", text: "Germany", title: "Company headquarters location", }, { category: "general", text: "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.", title: "Recommended Practices", }, { category: "general", text: "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", title: "Recommended Practices", }, { category: "general", text: "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", title: "Recommended Practices", }, { category: "general", text: "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", title: "Recommended Practices", }, { category: "general", text: "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", title: "Recommended Practices", }, { category: "general", text: "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", title: "Recommended Practices", }, { category: "general", text: "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", title: "Recommended Practices", }, { category: "general", text: "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", title: "Recommended Practices", }, ], publisher: { category: "other", contact_details: "central@cisa.dhs.gov", name: "CISA", namespace: "https://www.cisa.gov/", }, references: [ { category: "self", summary: "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - CSAF Version", url: "https://cert-portal.siemens.com/productcert/csaf/ssa-412672.json", }, { category: "self", summary: "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - TXT Version", url: "https://cert-portal.siemens.com/productcert/txt/ssa-412672.txt", }, { category: "self", summary: "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - PDF Version", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, { category: "self", summary: "ICS Advisory ICSA-22-349-21 JSON", url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-349-21.json", }, { category: "self", summary: "ICS Advisory ICSA-22-349-21 - Web Version", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-21", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/topics/industrial-control-systems", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B", }, ], title: "Siemens SCALANCE X-200RNA Switch Devices", tracking: { current_release_date: "2022-12-13T00:00:00.000000Z", generator: { engine: { name: "CISA CSAF Generator", version: "1.0.0", }, }, id: "ICSA-22-349-21", initial_release_date: "2022-12-13T00:00:00.000000Z", revision_history: [ { date: "2022-12-13T00:00:00.000000Z", legacy_version: "1.0", number: "1", summary: "Publication Date", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)", product_id: "CSAFPID-0001", product_identification_helper: { model_numbers: [ "6GK5204-0BA00-2MB2", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)", product_id: "CSAFPID-0002", product_identification_helper: { model_numbers: [ "6GK5204-0BA00-2KB2", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)", product_id: "CSAFPID-0003", product_identification_helper: { model_numbers: [ "6GK5204-0BS00-2NA3", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)", product_id: "CSAFPID-0004", product_identification_helper: { model_numbers: [ "6GK5204-0BS00-3LA3", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)", product_id: "CSAFPID-0005", product_identification_helper: { model_numbers: [ "6GK5204-0BS00-3PA3", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)", }, ], category: "vendor", name: "Siemens", }, ], }, vulnerabilities: [ { cve: "CVE-2003-0190", cwe: { id: "CWE-208", name: "Observable Timing Discrepancy", }, notes: [ { category: "summary", text: "OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2003-0190", }, { cve: "CVE-2003-1562", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2003-1562", }, { cve: "CVE-2014-8176", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2014-8176", }, { cve: "CVE-2015-0207", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0207", }, { cve: "CVE-2015-0208", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0208", }, { cve: "CVE-2015-0209", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "summary", text: "Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0209", }, { cve: "CVE-2015-0285", cwe: { id: "CWE-335", name: "Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)", }, notes: [ { category: "summary", text: "The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0285", }, { cve: "CVE-2015-0286", cwe: { id: "CWE-1024", name: "Comparison of Incompatible Types", }, notes: [ { category: "summary", text: "The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0286", }, { cve: "CVE-2015-0287", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0287", }, { cve: "CVE-2015-0288", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0288", }, { cve: "CVE-2015-0289", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0289", }, { cve: "CVE-2015-0290", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0290", }, { cve: "CVE-2015-0291", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0291", }, { cve: "CVE-2015-0292", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0292", }, { cve: "CVE-2015-0293", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0293", }, { cve: "CVE-2015-1787", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1787", }, { cve: "CVE-2015-1788", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1788", }, { cve: "CVE-2015-1789", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1789", }, { cve: "CVE-2015-1790", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1790", }, { cve: "CVE-2015-1791", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1791", }, { cve: "CVE-2015-1792", cwe: { id: "CWE-690", name: "Unchecked Return Value to NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1792", }, { cve: "CVE-2015-1794", cwe: { id: "CWE-682", name: "Incorrect Calculation", }, notes: [ { category: "summary", text: "The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1794", }, { cve: "CVE-2015-3193", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3193", }, { cve: "CVE-2015-3194", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3194", }, { cve: "CVE-2015-3195", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3195", }, { cve: "CVE-2015-3196", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3196", }, { cve: "CVE-2015-3197", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3197", }, { cve: "CVE-2015-4000", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-4000", }, { cve: "CVE-2015-5352", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, notes: [ { category: "summary", text: "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-5352", }, { cve: "CVE-2015-5600", cwe: { id: "CWE-799", name: "Improper Control of Interaction Frequency", }, notes: [ { category: "summary", text: "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-5600", }, { cve: "CVE-2015-6563", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 2.9, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-6563", }, { cve: "CVE-2015-6564", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "summary", text: "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.4, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-6564", }, { cve: "CVE-2015-6565", cwe: { id: "CWE-284", name: "Improper Access Control", }, notes: [ { category: "summary", text: "sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.4, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-6565", }, { cve: "CVE-2015-8325", cwe: { id: "CWE-426", name: "Untrusted Search Path", }, notes: [ { category: "summary", text: "The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-8325", }, { cve: "CVE-2016-0701", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0701", }, { cve: "CVE-2016-0702", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0702", }, { cve: "CVE-2016-0703", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0703", }, { cve: "CVE-2016-0704", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0704", }, { cve: "CVE-2016-0705", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0705", }, { cve: "CVE-2016-0777", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0777", }, { cve: "CVE-2016-0778", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0778", }, { cve: "CVE-2016-0797", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0797", }, { cve: "CVE-2016-0798", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0798", }, { cve: "CVE-2016-0799", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0799", }, { cve: "CVE-2016-0800", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "A cross-protocol attack was discovered that could allow an attacker to decrypt intercepted TLS sessions by using a server supporting SSLv2 as a Bleichenbacher RSA padding oracle.\nIn order to exploit the vulnerability, the attacker must have network access to the affected devices and must be in a privileged network position.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0800", }, { cve: "CVE-2016-1907", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-1907", }, { cve: "CVE-2016-1908", cwe: { id: "CWE-287", name: "Improper Authentication", }, notes: [ { category: "summary", text: "The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-1908", }, { cve: "CVE-2016-2105", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2105", }, { cve: "CVE-2016-2106", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2106", }, { cve: "CVE-2016-2107", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2107", }, { cve: "CVE-2016-2108", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2108", }, { cve: "CVE-2016-2109", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2109", }, { cve: "CVE-2016-2176", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2176", }, { cve: "CVE-2016-2177", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2177", }, { cve: "CVE-2016-2178", cwe: { id: "CWE-203", name: "Observable Discrepancy", }, notes: [ { category: "summary", text: "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2178", }, { cve: "CVE-2016-2179", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2179", }, { cve: "CVE-2016-2180", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2180", }, { cve: "CVE-2016-2181", cwe: { id: "CWE-682", name: "Incorrect Calculation", }, notes: [ { category: "summary", text: "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2181", }, { cve: "CVE-2016-2182", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2182", }, { cve: "CVE-2016-2183", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2183", }, { cve: "CVE-2016-6210", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6210", }, { cve: "CVE-2016-6302", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6302", }, { cve: "CVE-2016-6303", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6303", }, { cve: "CVE-2016-6304", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6304", }, { cve: "CVE-2016-6305", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6305", }, { cve: "CVE-2016-6306", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6306", }, { cve: "CVE-2016-6307", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, notes: [ { category: "summary", text: "The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6307", }, { cve: "CVE-2016-6308", cwe: { id: "CWE-130", name: "Improper Handling of Length Parameter Inconsistency", }, notes: [ { category: "summary", text: "statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6308", }, { cve: "CVE-2016-6515", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6515", }, { cve: "CVE-2016-8858", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\"", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-8858", }, { cve: "CVE-2016-10009", cwe: { id: "CWE-426", name: "Untrusted Search Path", }, notes: [ { category: "summary", text: "Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10009", }, { cve: "CVE-2016-10010", cwe: { id: "CWE-284", name: "Improper Access Control", }, notes: [ { category: "summary", text: "sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10010", }, { cve: "CVE-2016-10011", cwe: { id: "CWE-244", name: "Improper Clearing of Heap Memory Before Release ('Heap Inspection')", }, notes: [ { category: "summary", text: "authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10011", }, { cve: "CVE-2016-10012", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10012", }, { cve: "CVE-2017-3735", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2017-3735", }, { cve: "CVE-2017-15906", cwe: { id: "CWE-732", name: "Incorrect Permission Assignment for Critical Resource", }, notes: [ { category: "summary", text: "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2017-15906", }, { cve: "CVE-2018-15473", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2018-15473", }, { cve: "CVE-2018-20685", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, notes: [ { category: "summary", text: "In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2018-20685", }, { cve: "CVE-2019-1552", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, notes: [ { category: "summary", text: "OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be '/usr/local'. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of 'C:/usr/local', which may be world writable, which enables untrusted users to modify OpenSSL's default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, '/usr/local/ssl' is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-1552", }, { cve: "CVE-2019-6109", cwe: { id: "CWE-116", name: "Improper Encoding or Escaping of Output", }, notes: [ { category: "summary", text: "An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-6109", }, { cve: "CVE-2019-6110", cwe: { id: "CWE-838", name: "Inappropriate Encoding for Output Context", }, notes: [ { category: "summary", text: "In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-6110", }, { cve: "CVE-2019-6111", cwe: { id: "CWE-22", name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", }, notes: [ { category: "summary", text: "An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-6111", }, { cve: "CVE-2019-16905", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-16905", }, ], }
icsa-22-349-21
Vulnerability from csaf_cisa
Published
2022-12-13 00:00
Modified
2022-12-13 00:00
Summary
Siemens SCALANCE X-200RNA Switch Devices
Notes
Summary
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at:
https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{ document: { acknowledgments: [ { organization: "Siemens ProductCERT", summary: "reporting these vulnerabilities to CISA.", }, ], category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Disclosure is not limited", tlp: { label: "WHITE", url: "https://us-cert.cisa.gov/tlp/", }, }, notes: [ { category: "summary", text: "SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.", title: "Summary", }, { category: "general", text: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: \nhttps://www.siemens.com/industrialsecurity", title: "General Recommendations", }, { category: "general", text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", title: "Additional Resources", }, { category: "legal_disclaimer", text: "Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", title: "Terms of Use", }, { category: "legal_disclaimer", text: "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", title: "Legal Notice", }, { category: "other", text: "This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.", title: "Advisory Conversion Disclaimer", }, { category: "other", text: "Multiple", title: "Critical infrastructure sectors", }, { category: "other", text: "Worldwide", title: "Countries/areas deployed", }, { category: "other", text: "Germany", title: "Company headquarters location", }, { category: "general", text: "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.", title: "Recommended Practices", }, { category: "general", text: "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", title: "Recommended Practices", }, { category: "general", text: "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", title: "Recommended Practices", }, { category: "general", text: "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", title: "Recommended Practices", }, { category: "general", text: "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", title: "Recommended Practices", }, { category: "general", text: "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", title: "Recommended Practices", }, { category: "general", text: "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", title: "Recommended Practices", }, { category: "general", text: "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", title: "Recommended Practices", }, ], publisher: { category: "other", contact_details: "central@cisa.dhs.gov", name: "CISA", namespace: "https://www.cisa.gov/", }, references: [ { category: "self", summary: "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - CSAF Version", url: "https://cert-portal.siemens.com/productcert/csaf/ssa-412672.json", }, { category: "self", summary: "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - TXT Version", url: "https://cert-portal.siemens.com/productcert/txt/ssa-412672.txt", }, { category: "self", summary: "SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 - PDF Version", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, { category: "self", summary: "ICS Advisory ICSA-22-349-21 JSON", url: "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-349-21.json", }, { category: "self", summary: "ICS Advisory ICSA-22-349-21 - Web Version", url: "https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-21", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/topics/industrial-control-systems", }, { category: "external", summary: "Recommended Practices", url: "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf", }, { category: "external", summary: "Recommended Practices", url: "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B", }, ], title: "Siemens SCALANCE X-200RNA Switch Devices", tracking: { current_release_date: "2022-12-13T00:00:00.000000Z", generator: { engine: { name: "CISA CSAF Generator", version: "1.0.0", }, }, id: "ICSA-22-349-21", initial_release_date: "2022-12-13T00:00:00.000000Z", revision_history: [ { date: "2022-12-13T00:00:00.000000Z", legacy_version: "1.0", number: "1", summary: "Publication Date", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)", product_id: "CSAFPID-0001", product_identification_helper: { model_numbers: [ "6GK5204-0BA00-2MB2", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)", product_id: "CSAFPID-0002", product_identification_helper: { model_numbers: [ "6GK5204-0BA00-2KB2", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)", product_id: "CSAFPID-0003", product_identification_helper: { model_numbers: [ "6GK5204-0BS00-2NA3", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)", product_id: "CSAFPID-0004", product_identification_helper: { model_numbers: [ "6GK5204-0BS00-3LA3", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)", }, { branches: [ { category: "product_version_range", name: "<V3.2.7", product: { name: "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)", product_id: "CSAFPID-0005", product_identification_helper: { model_numbers: [ "6GK5204-0BS00-3PA3", ], }, }, }, ], category: "product_name", name: "SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)", }, ], category: "vendor", name: "Siemens", }, ], }, vulnerabilities: [ { cve: "CVE-2003-0190", cwe: { id: "CWE-208", name: "Observable Timing Discrepancy", }, notes: [ { category: "summary", text: "OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2003-0190", }, { cve: "CVE-2003-1562", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2003-1562", }, { cve: "CVE-2014-8176", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2014-8176", }, { cve: "CVE-2015-0207", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2 server.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0207", }, { cve: "CVE-2015-0208", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to an endpoint that uses the certificate-verification feature.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0208", }, { cve: "CVE-2015-0209", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "summary", text: "Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0209", }, { cve: "CVE-2015-0285", cwe: { id: "CWE-335", name: "Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)", }, notes: [ { category: "summary", text: "The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and then conducting a brute-force attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0285", }, { cve: "CVE-2015-0286", cwe: { id: "CWE-1024", name: "Comparison of Incompatible Types", }, notes: [ { category: "summary", text: "The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0286", }, { cve: "CVE-2015-0287", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0287", }, { cve: "CVE-2015-0288", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0288", }, { cve: "CVE-2015-0289", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0289", }, { cve: "CVE-2015-0290", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote attackers to cause a denial of service (pointer corruption and application crash) via unspecified vectors.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0290", }, { cve: "CVE-2015-0291", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0291", }, { cve: "CVE-2015-0292", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0292", }, { cve: "CVE-2015-0293", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-0293", }, { cve: "CVE-2015-1787", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to cause a denial of service (daemon crash) via a ClientKeyExchange message with a length of zero.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1787", }, { cve: "CVE-2015-1788", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1788", }, { cve: "CVE-2015-1789", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1789", }, { cve: "CVE-2015-1790", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1790", }, { cve: "CVE-2015-1791", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1791", }, { cve: "CVE-2015-1792", cwe: { id: "CWE-690", name: "Unchecked Return Value to NULL Pointer Dereference", }, notes: [ { category: "summary", text: "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1792", }, { cve: "CVE-2015-1794", cwe: { id: "CWE-682", name: "Incorrect Calculation", }, notes: [ { category: "summary", text: "The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-1794", }, { cve: "CVE-2015-3193", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3193", }, { cve: "CVE-2015-3194", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "summary", text: "crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3194", }, { cve: "CVE-2015-3195", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3195", }, { cve: "CVE-2015-3196", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3196", }, { cve: "CVE-2015-3197", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-3197", }, { cve: "CVE-2015-4000", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-4000", }, { cve: "CVE-2015-5352", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, notes: [ { category: "summary", text: "The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-5352", }, { cve: "CVE-2015-5600", cwe: { id: "CWE-799", name: "Improper Control of Interaction Frequency", }, notes: [ { category: "summary", text: "The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-5600", }, { cve: "CVE-2015-6563", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 2.9, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-6563", }, { cve: "CVE-2015-6564", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "summary", text: "Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.4, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-6564", }, { cve: "CVE-2015-6565", cwe: { id: "CWE-284", name: "Improper Access Control", }, notes: [ { category: "summary", text: "sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.4, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-6565", }, { cve: "CVE-2015-8325", cwe: { id: "CWE-426", name: "Untrusted Search Path", }, notes: [ { category: "summary", text: "The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2015-8325", }, { cve: "CVE-2016-0701", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0701", }, { cve: "CVE-2016-0702", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0702", }, { cve: "CVE-2016-0703", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0703", }, { cve: "CVE-2016-0704", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0704", }, { cve: "CVE-2016-0705", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0705", }, { cve: "CVE-2016-0777", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0777", }, { cve: "CVE-2016-0778", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0778", }, { cve: "CVE-2016-0797", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0797", }, { cve: "CVE-2016-0798", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0798", }, { cve: "CVE-2016-0799", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0799", }, { cve: "CVE-2016-0800", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "A cross-protocol attack was discovered that could allow an attacker to decrypt intercepted TLS sessions by using a server supporting SSLv2 as a Bleichenbacher RSA padding oracle.\nIn order to exploit the vulnerability, the attacker must have network access to the affected devices and must be in a privileged network position.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-0800", }, { cve: "CVE-2016-1907", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-1907", }, { cve: "CVE-2016-1908", cwe: { id: "CWE-287", name: "Improper Authentication", }, notes: [ { category: "summary", text: "The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-1908", }, { cve: "CVE-2016-2105", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2105", }, { cve: "CVE-2016-2106", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2106", }, { cve: "CVE-2016-2107", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2107", }, { cve: "CVE-2016-2108", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2108", }, { cve: "CVE-2016-2109", cwe: { id: "CWE-327", name: "Use of a Broken or Risky Cryptographic Algorithm", }, notes: [ { category: "summary", text: "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2109", }, { cve: "CVE-2016-2176", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2176", }, { cve: "CVE-2016-2177", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2177", }, { cve: "CVE-2016-2178", cwe: { id: "CWE-203", name: "Observable Discrepancy", }, notes: [ { category: "summary", text: "The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2178", }, { cve: "CVE-2016-2179", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2179", }, { cve: "CVE-2016-2180", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the \"openssl ts\" command.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2180", }, { cve: "CVE-2016-2181", cwe: { id: "CWE-682", name: "Incorrect Calculation", }, notes: [ { category: "summary", text: "The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2181", }, { cve: "CVE-2016-2182", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2182", }, { cve: "CVE-2016-2183", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-2183", }, { cve: "CVE-2016-6210", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "summary", text: "sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6210", }, { cve: "CVE-2016-6302", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6302", }, { cve: "CVE-2016-6303", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "summary", text: "Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6303", }, { cve: "CVE-2016-6304", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6304", }, { cve: "CVE-2016-6305", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6305", }, { cve: "CVE-2016-6306", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "summary", text: "The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6306", }, { cve: "CVE-2016-6307", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, notes: [ { category: "summary", text: "The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6307", }, { cve: "CVE-2016-6308", cwe: { id: "CWE-130", name: "Improper Handling of Length Parameter Inconsistency", }, notes: [ { category: "summary", text: "statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6308", }, { cve: "CVE-2016-6515", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "summary", text: "The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-6515", }, { cve: "CVE-2016-8858", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "summary", text: "** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that \"OpenSSH upstream does not consider this as a security issue.\"", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-8858", }, { cve: "CVE-2016-10009", cwe: { id: "CWE-426", name: "Untrusted Search Path", }, notes: [ { category: "summary", text: "Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10009", }, { cve: "CVE-2016-10010", cwe: { id: "CWE-284", name: "Improper Access Control", }, notes: [ { category: "summary", text: "sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10010", }, { cve: "CVE-2016-10011", cwe: { id: "CWE-244", name: "Improper Clearing of Heap Memory Before Release ('Heap Inspection')", }, notes: [ { category: "summary", text: "authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10011", }, { cve: "CVE-2016-10012", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2016-10012", }, { cve: "CVE-2017-3735", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "summary", text: "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2017-3735", }, { cve: "CVE-2017-15906", cwe: { id: "CWE-732", name: "Incorrect Permission Assignment for Critical Resource", }, notes: [ { category: "summary", text: "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2017-15906", }, { cve: "CVE-2018-15473", cwe: { id: "CWE-362", name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", }, notes: [ { category: "summary", text: "OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2018-15473", }, { cve: "CVE-2018-20685", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, notes: [ { category: "summary", text: "In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2018-20685", }, { cve: "CVE-2019-1552", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, notes: [ { category: "summary", text: "OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versions 1.1.0 and 1.1.1, the mingw configuration targets assume that resulting programs and libraries are installed in a Unix-like environment and the default prefix for program installation as well as for OPENSSLDIR should be '/usr/local'. However, mingw programs are Windows programs, and as such, find themselves looking at sub-directories of 'C:/usr/local', which may be world writable, which enables untrusted users to modify OpenSSL's default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc. For OpenSSL 1.0.2, '/usr/local/ssl' is used as default for OPENSSLDIR on all Unix and Windows targets, including Visual C builds. However, some build instructions for the diverse Windows targets on 1.0.2 encourage you to specify your own --prefix. OpenSSL versions 1.1.1, 1.1.0 and 1.0.2 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-1552", }, { cve: "CVE-2019-6109", cwe: { id: "CWE-116", name: "Improper Encoding or Escaping of Output", }, notes: [ { category: "summary", text: "An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-6109", }, { cve: "CVE-2019-6110", cwe: { id: "CWE-838", name: "Inappropriate Encoding for Output Context", }, notes: [ { category: "summary", text: "In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-6110", }, { cve: "CVE-2019-6111", cwe: { id: "CWE-22", name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", }, notes: [ { category: "summary", text: "An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-6111", }, { cve: "CVE-2019-16905", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "summary", text: "OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.", title: "Summary", }, ], product_status: { known_affected: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, remediations: [ { category: "mitigation", details: "Restrict access to the affected systems, especially to ports 22/tcp and 443/tcp to trusted IP addresses only", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "mitigation", details: "Deactivate the webserver if not required, and if deactivation is supported by the product", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, { category: "vendor_fix", details: "Update to V3.2.7 or later version", product_ids: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], url: "https://support.industry.siemens.com/cs/ww/en/view/109814809/", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", ], }, ], title: "CVE-2019-16905", }, ], }
var-201609-0349
Vulnerability from variot
The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call. OpenSSL is prone to denial-of-service vulnerability. An attacker may exploit this issue to cause a denial-of-service condition. OpenSSL version 1.1.0 is vulnerable.
Gentoo Linux Security Advisory GLSA 201612-16
https://security.gentoo.org/
Severity: Normal Title: OpenSSL: Multiple vulnerabilities Date: December 07, 2016 Bugs: #581234, #585142, #585276, #591454, #592068, #592074, #592082, #594500, #595186 ID: 201612-16
Synopsis
Multiple vulnerabilities have been found in OpenSSL, the worst of which allows attackers to conduct a time based side-channel attack.
Background
OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) as well as a general purpose cryptography library.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 dev-libs/openssl < 1.0.2j >= 1.0.2j
Description
Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers and the International Association for Cryptologic Research's (IACR) paper, "Make Sure DSA Signing Exponentiations Really are Constant-Time" for further details.
Workaround
There is no known workaround at this time.
Resolution
All OpenSSL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/openssl-1.0.2j"
References
[ 1 ] CVE-2016-2105 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2105 [ 2 ] CVE-2016-2106 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2106 [ 3 ] CVE-2016-2107 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2107 [ 4 ] CVE-2016-2108 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2108 [ 5 ] CVE-2016-2109 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2109 [ 6 ] CVE-2016-2176 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2176 [ 7 ] CVE-2016-2177 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2177 [ 8 ] CVE-2016-2178 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2178 [ 9 ] CVE-2016-2180 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2180 [ 10 ] CVE-2016-2183 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2183 [ 11 ] CVE-2016-6304 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6304 [ 12 ] CVE-2016-6305 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6305 [ 13 ] CVE-2016-6306 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6306 [ 14 ] CVE-2016-7052 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7052 [ 15 ] Make Sure DSA Signing Exponentiations Really are Constant-Time http://eprint.iacr.org/2016/594.pdf
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/201612-16
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2016 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
. OpenSSL Security Advisory [22 Sep 2016] ========================================
OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
Severity: High
A malicious client can send an excessively large OCSP Status Request extension. If that client continually requests renegotiation, sending a large OCSP Status Request extension each time, then there will be unbounded memory growth on the server. This will eventually lead to a Denial Of Service attack through memory exhaustion. Servers with a default configuration are vulnerable even if they do not support OCSP. Builds using the "no-ocsp" build time option are not affected.
Servers using OpenSSL versions prior to 1.0.1g are not vulnerable in a default configuration, instead only if an application explicitly enables OCSP stapling support.
OpenSSL 1.1.0 users should upgrade to 1.1.0a OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 29th August 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Matt Caswell of the OpenSSL development team.
SSL_peek() hang on empty record (CVE-2016-6305)
Severity: Moderate
OpenSSL 1.1.0 SSL/TLS will hang during a call to SSL_peek() if the peer sends an empty record. This could be exploited by a malicious peer in a Denial Of Service attack.
OpenSSL 1.1.0 users should upgrade to 1.1.0a
This issue was reported to OpenSSL on 10th September 2016 by Alex Gaynor. The fix was developed by Matt Caswell of the OpenSSL development team.
SWEET32 Mitigation (CVE-2016-2183)
Severity: Low
SWEET32 (https://sweet32.info) is an attack on older block cipher algorithms that use a block size of 64 bits. In mitigation for the SWEET32 attack DES based ciphersuites have been moved from the HIGH cipherstring group to MEDIUM in OpenSSL 1.0.1 and OpenSSL 1.0.2. OpenSSL 1.1.0 since release has had these ciphersuites disabled by default.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 16th August 2016 by Karthikeyan Bhargavan and Gaetan Leurent (INRIA). The fix was developed by Rich Salz of the OpenSSL development team.
OOB write in MDC2_Update() (CVE-2016-6303)
Severity: Low
An overflow can occur in MDC2_Update() either if called directly or through the EVP_DigestUpdate() function using MDC2. If an attacker is able to supply very large amounts of input data after a previous call to EVP_EncryptUpdate() with a partial block then a length check can overflow resulting in a heap corruption.
The amount of data needed is comparable to SIZE_MAX which is impractical on most platforms.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 11th August 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL development team.
Malformed SHA512 ticket DoS (CVE-2016-6302)
Severity: Low
If a server uses SHA512 for TLS session ticket HMAC it is vulnerable to a DoS attack where a malformed ticket will result in an OOB read which will ultimately crash.
The use of SHA512 in TLS session tickets is comparatively rare as it requires a custom server callback and ticket lookup mechanism.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 19th August 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL development team.
OOB write in BN_bn2dec() (CVE-2016-2182)
Severity: Low
The function BN_bn2dec() does not check the return value of BN_div_word(). This can cause an OOB write if an application uses this function with an overly large BIGNUM. This could be a problem if an overly large certificate or CRL is printed out from an untrusted source. TLS is not affected because record limits will reject an oversized certificate before it is parsed.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 2nd August 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL development team.
OOB read in TS_OBJ_print_bio() (CVE-2016-2180)
Severity: Low
The function TS_OBJ_print_bio() misuses OBJ_obj2txt(): the return value is the total length the OID text representation would use and not the amount of data written. This will result in OOB reads when large OIDs are presented.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 21st July 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL development team.
Pointer arithmetic undefined behaviour (CVE-2016-2177)
Severity: Low
Avoid some undefined pointer arithmetic
A common idiom in the codebase is to check limits in the following manner: "p + len > limit"
Where "p" points to some malloc'd data of SIZE bytes and limit == p + SIZE
"len" here could be from some externally supplied data (e.g. from a TLS message).
The rules of C pointer arithmetic are such that "p + len" is only well defined where len <= SIZE. Therefore the above idiom is actually undefined behaviour.
For example this could cause problems if some malloc implementation provides an address for "p" such that "p + len" actually overflows for values of len that are too big and therefore p + len < limit.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 4th May 2016 by Guido Vranken. The fix was developed by Matt Caswell of the OpenSSL development team.
Constant time flag not preserved in DSA signing (CVE-2016-2178)
Severity: Low
Operations in the DSA signing algorithm should run in constant time in order to avoid side channel attacks. A flaw in the OpenSSL DSA implementation means that a non-constant time codepath is followed for certain operations. This has been demonstrated through a cache-timing attack to be sufficient for an attacker to recover the private DSA key.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 23rd May 2016 by César Pereida (Aalto University), Billy Brumley (Tampere University of Technology), and Yuval Yarom (The University of Adelaide and NICTA). The fix was developed by César Pereida.
DTLS buffered message DoS (CVE-2016-2179)
Severity: Low
In a DTLS connection where handshake messages are delivered out-of-order those messages that OpenSSL is not yet ready to process will be buffered for later use. Under certain circumstances, a flaw in the logic means that those messages do not get removed from the buffer even though the handshake has been completed. An attacker could force up to approx. 15 messages to remain in the buffer when they are no longer required. These messages will be cleared when the DTLS connection is closed. The default maximum size for a message is 100k. Therefore the attacker could force an additional 1500k to be consumed per connection. By opening many simulataneous connections an attacker could cause a DoS attack through memory exhaustion.
OpenSSL 1.0.2 DTLS users should upgrade to 1.0.2i OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 22nd June 2016 by Quan Luo. The fix was developed by Matt Caswell of the OpenSSL development team.
DTLS replay protection DoS (CVE-2016-2181)
Severity: Low
A flaw in the DTLS replay attack protection mechanism means that records that arrive for future epochs update the replay protection "window" before the MAC for the record has been validated. This could be exploited by an attacker by sending a record for the next epoch (which does not have to decrypt or have a valid MAC), with a very large sequence number. This means that all subsequent legitimate packets are dropped causing a denial of service for a specific DTLS connection.
OpenSSL 1.0.2 DTLS users should upgrade to 1.0.2i OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 21st November 2015 by the OCAP audit team. The fix was developed by Matt Caswell of the OpenSSL development team.
Certificate message OOB reads (CVE-2016-6306)
Severity: Low
In OpenSSL 1.0.2 and earlier some missing message length checks can result in OOB reads of up to 2 bytes beyond an allocated buffer. There is a theoretical DoS risk but this has not been observed in practice on common platforms.
The messages affected are client certificate, client certificate request and server certificate. As a result the attack can only be performed against a client or a server which enables client authentication.
OpenSSL 1.0.2 users should upgrade to 1.0.2i OpenSSL 1.0.1 users should upgrade to 1.0.1u
This issue was reported to OpenSSL on 22nd August 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL development team.
Excessive allocation of memory in tls_get_message_header() (CVE-2016-6307)
Severity: Low
A TLS message includes 3 bytes for its length in the header for the message. This would allow for messages up to 16Mb in length. Messages of this length are excessive and OpenSSL includes a check to ensure that a peer is sending reasonably sized messages in order to avoid too much memory being consumed to service a connection. A flaw in the logic of version 1.1.0 means that memory for the message is allocated too early, prior to the excessive message length check. Due to way memory is allocated in OpenSSL this could mean an attacker could force up to 21Mb to be allocated to service a connection. This could lead to a Denial of Service through memory exhaustion. However, the excessive message length check still takes place, and this would cause the connection to immediately fail. Assuming that the application calls SSL_free() on the failed conneciton in a timely manner then the 21Mb of allocated memory will then be immediately freed again. Therefore the excessive memory allocation will be transitory in nature. This then means that there is only a security impact if:
1) The application does not call SSL_free() in a timely manner in the event that the connection fails or 2) The application is working in a constrained environment where there is very little free memory or 3) The attacker initiates multiple connection attempts such that there are multiple connections in a state where memory has been allocated for the connection; SSL_free() has not yet been called; and there is insufficient memory to service the multiple requests.
Except in the instance of (1) above any Denial Of Service is likely to be transitory because as soon as the connection fails the memory is subsequently freed again in the SSL_free() call. However there is an increased risk during this period of application crashes due to the lack of memory - which would then mean a more serious Denial of Service.
This issue does not affect DTLS users.
OpenSSL 1.1.0 TLS users should upgrade to 1.1.0a
This issue was reported to OpenSSL on 18th September 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Matt Caswell of the OpenSSL development team.
Excessive allocation of memory in dtls1_preprocess_fragment() (CVE-2016-6308)
Severity: Low
This issue is very similar to CVE-2016-6307. The underlying defect is different but the security analysis and impacts are the same except that it impacts DTLS.
A DTLS message includes 3 bytes for its length in the header for the message. This would allow for messages up to 16Mb in length. Messages of this length are excessive and OpenSSL includes a check to ensure that a peer is sending reasonably sized messages in order to avoid too much memory being consumed to service a connection. A flaw in the logic of version 1.1.0 means that memory for the message is allocated too early, prior to the excessive message length check. Due to way memory is allocated in OpenSSL this could mean an attacker could force up to 21Mb to be allocated to service a connection. This could lead to a Denial of Service through memory exhaustion. However, the excessive message length check still takes place, and this would cause the connection to immediately fail. Assuming that the application calls SSL_free() on the failed conneciton in a timely manner then the 21Mb of allocated memory will then be immediately freed again. Therefore the excessive memory allocation will be transitory in nature. This then means that there is only a security impact if:
1) The application does not call SSL_free() in a timely manner in the event that the connection fails or 2) The application is working in a constrained environment where there is very little free memory or 3) The attacker initiates multiple connection attempts such that there are multiple connections in a state where memory has been allocated for the connection; SSL_free() has not yet been called; and there is insufficient memory to service the multiple requests.
Except in the instance of (1) above any Denial Of Service is likely to be transitory because as soon as the connection fails the memory is subsequently freed again in the SSL_free() call. However there is an increased risk during this period of application crashes due to the lack of memory - which would then mean a more serious Denial of Service.
This issue does not affect TLS users.
OpenSSL 1.1.0 DTLS users should upgrade to 1.1.0a
This issue was reported to OpenSSL on 18th September 2016 by Shi Lei (Gear Team, Qihoo 360 Inc.). The fix was developed by Matt Caswell of the OpenSSL development team.
Note
As per our previous announcements and our Release Strategy (https://www.openssl.org/policies/releasestrat.html), support for OpenSSL version 1.0.1 will cease on 31st December 2016. No security updates for that version will be provided after that date. Users of 1.0.1 are advised to upgrade.
Support for versions 0.9.8 and 1.0.0 ended on 31st December 2015. Those versions are no longer receiving security updates.
References
URL for this Security Advisory: https://www.openssl.org/news/secadv/20160922.txt
Note: the online version of the advisory may be updated with additional details over time.
For details of OpenSSL severity classifications please see: https://www.openssl.org/policies/secpolicy.html
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-201609-0349", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "openssl", scope: "eq", trust: 1.6, vendor: "openssl", version: "1.1.0", }, { model: "esmpro/serveragentservice", scope: "eq", trust: 0.8, vendor: "nec", version: "all versions (linux edition )", }, { model: "openssl", scope: "lt", trust: 0.8, vendor: "openssl", version: "1.1.0", }, { model: "webotx application server", scope: "eq", trust: 0.8, vendor: "nec", version: "express v8.2 to v9.4", }, { model: "enterpriseidentitymanager", scope: null, trust: 0.8, vendor: "nec", version: null, }, { model: "webotx application server", scope: "eq", trust: 0.8, vendor: "nec", version: "enterprise v8.2 to v9.4", }, { model: "webotx application server", scope: "eq", trust: 0.8, vendor: "nec", version: "st ard v8.2 to v9.4", }, { model: "ix2000 series", scope: null, trust: 0.8, vendor: "nec", version: null, }, { model: "ix3000 series", scope: null, trust: 0.8, vendor: "nec", version: null, }, { model: "secureware/pki application development kit", scope: "eq", trust: 0.8, vendor: "nec", version: "ver3.2", }, { model: "webotx application server", scope: "eq", trust: 0.8, vendor: "nec", version: "foundation v8.2 to v8.5", }, { model: "openssl", scope: "eq", trust: 0.8, vendor: "openssl", version: "1.1.0a", }, { model: "ix1000 series", scope: null, trust: 0.8, vendor: "nec", version: null, }, { model: "webotx enterprise service bus", scope: "eq", trust: 0.8, vendor: "nec", version: "v8.2 to v8.5", }, { model: "webotx portal", scope: "eq", trust: 0.8, vendor: "nec", version: "v8.2 to v9.1", }, { model: "capssuite", scope: "eq", trust: 0.8, vendor: "nec", version: "v3.0 to v4.0", }, { model: "express5800", scope: "eq", trust: 0.8, vendor: "nec", version: "sg3600 all series", }, { model: "paging server", scope: "eq", trust: 0.6, vendor: "cisco", version: "0", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.10", }, { model: "webex centers t32", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "video surveillance series ip cameras", scope: "eq", trust: 0.3, vendor: "cisco", version: "30000", }, { model: "sterling connect:express for unix ifix", scope: "ne", trust: 0.3, vendor: "ibm", version: "1.5.0.13150-13", }, { model: "clean access manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series blade switches 4.1 e1", scope: "ne", trust: 0.3, vendor: "cisco", version: "4000", }, { model: "sterling connect:express for unix", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.5.0.9", }, { model: "telepresence content server", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "proactive network operations center", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "commerce guided search", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.5", }, { model: "unified ip phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "69010", }, { model: "anyconnect secure mobility client for linux", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.0.7", }, { model: "ucs central software", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video surveillance media server", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "sterling connect:express for unix", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.5.0.13", }, { model: "stealthwatch management console", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ios and cisco ios xe software", scope: "ne", trust: 0.3, vendor: "cisco", version: "16.2", }, { model: "anyconnect secure mobility client for android", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.0.7", }, { model: "jabber software development kit", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.8", }, { model: "computer telephony integration object server", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified workforce optimization", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "industrial router 1.2.1rb4", scope: "ne", trust: 0.3, vendor: "cisco", version: "910", }, { model: "ip interoperability and collaboration system", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "asr series", scope: "eq", trust: 0.3, vendor: "cisco", version: "50000", }, { model: "edge digital media player", scope: "eq", trust: 0.3, vendor: "cisco", version: "3400", }, { model: "nexus series switches standalone nx-os mode", scope: "eq", trust: 0.3, vendor: "cisco", version: "9000-0", }, { model: "unified contact center enterprise", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series switches standalone nx-os mode 7.0 i5", scope: "ne", trust: 0.3, vendor: "cisco", version: "9000-", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.11", }, { model: "nexus series switches 5.2.8", scope: "ne", trust: 0.3, vendor: "cisco", version: "7000", }, { model: "anyconnect secure mobility client for desktop platforms", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "cognos business intelligence server", scope: "eq", trust: 0.3, vendor: "ibm", version: "10.1.1", }, { model: "jabber guest", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "prime license manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video surveillance ptz ip cameras", scope: "ne", trust: 0.3, vendor: "cisco", version: "2.9", }, { model: "series digital media players 5.3.6 rb3", scope: "ne", trust: 0.3, vendor: "cisco", version: "4300", }, { model: "stealthwatch flowcollector sflow", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "web security appliance", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "visual quality experience server", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "commerce guided search", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.2.2", }, { model: "video surveillance series ip cameras", scope: "ne", trust: 0.3, vendor: "cisco", version: "60002.9", }, { model: "content security management appliance", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "prime collaboration provisioning", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6", }, { model: "agent for openflow", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "commerce experience manager", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.3", }, { model: "anyconnect secure mobility client for desktop platforms", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.4", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.8", }, { model: "flex system manager", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.3.4.0", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.1", }, { model: "ons series multiservice provisioning platforms", scope: "eq", trust: 0.3, vendor: "cisco", version: "154540", }, { model: "telepresence sx series ce8.2.2", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "prime collaboration assurance", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "asa next-generation firewall services", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "email security appliance", scope: "ne", trust: 0.3, vendor: "cisco", version: "10.0.1", }, { model: "telepresence server on multiparty media", scope: "eq", trust: 0.3, vendor: "cisco", version: "8200", }, { model: "service delivery manager", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.2.1", }, { model: "unified communications manager im & presence service (formerly c", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ios and cisco ios xe software", scope: "ne", trust: 0.3, vendor: "cisco", version: "16.3", }, { model: "webex meetings for blackberry", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "wide area application services", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "security virtual server protection for vmware", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.0.1", }, { model: "firesight system software", scope: "ne", trust: 0.3, vendor: "cisco", version: "6.0.1.3", }, { model: "anyconnect secure mobility client for mac os", scope: "ne", trust: 0.3, vendor: "cisco", version: "x4.0.7", }, { model: "common services platform collector", scope: "ne", trust: 0.3, vendor: "cisco", version: "1.11", }, { model: "cognos business intelligence server", scope: "eq", trust: 0.3, vendor: "ibm", version: "10.2.1", }, { model: "partner support service", scope: "eq", trust: 0.3, vendor: "cisco", version: "1.0", }, { model: "media services interface", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "cloud web security", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "prime collaboration assurance", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6", }, { model: "jabber for iphone and ipad", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0", }, { model: "unified attendant console advanced", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "common services platform collector", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "anyconnect secure mobility client for windows", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence mx series ce8.2.2", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "spectrum control", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.8", }, { model: "webex meetings client on-premises", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "unified intelligence center", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6(1)", }, { model: "services provisioning platform", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ucs b-series blade servers", scope: "ne", trust: 0.3, vendor: "cisco", version: "3.1.3", }, { model: "nac appliance clean access manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "sterling connect:express for unix", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.4.6", }, { model: "telepresence system", scope: "eq", trust: 0.3, vendor: "cisco", version: "10000", }, { model: "jabber for android", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "asa next-generation firewall services", scope: "ne", trust: 0.3, vendor: "cisco", version: "2.1.2", }, { model: "mobilefirst platform foundation", scope: "eq", trust: 0.3, vendor: "ibm", version: "6.3.0.0", }, { model: "unified attendant console premium edition", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "api gateway", scope: "eq", trust: 0.3, vendor: "oracle", version: "11.1.2.4.0", }, { model: "commerce experience manager", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.5", }, { model: "services provisioning platform sfp1.1", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "mediasense", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "mysql workbench", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.1.5", }, { model: "video surveillance series high-definition ip cameras", scope: "eq", trust: 0.3, vendor: "cisco", version: "40000", }, { model: "jabber for android", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.8", }, { model: "anyconnect secure mobility client for desktop platforms", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.3.4", }, { model: "series digital media players 5.3.6 rb3", scope: "ne", trust: 0.3, vendor: "cisco", version: "4400", }, { model: "video surveillance series ip cameras", scope: "ne", trust: 0.3, vendor: "cisco", version: "30002.9", }, { model: "mysql workbench", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.3.8", }, { model: "stealthwatch identity", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "aironet series access points", scope: "ne", trust: 0.3, vendor: "cisco", version: "270016.2", }, { model: "application policy infrastructure controller", scope: "ne", trust: 0.3, vendor: "cisco", version: "2.2(1)", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.2", }, { model: "aironet series access points", scope: "ne", trust: 0.3, vendor: "cisco", version: "270016.1", }, { model: "unified workforce optimization quality management solution 11.5 su1", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "show and share", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence system ex series tc7.3.7", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "universal small cell iuh", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "2.0.5", }, { model: "ucs director", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "jabber client framework components", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.8", }, { model: "telepresence isdn link", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence profile series tc7.3.7", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "webex meetings client on-premises t32", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "dcm series d9900 digital content manager", scope: "ne", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series switches", scope: "ne", trust: 0.3, vendor: "cisco", version: "70006.2.19", }, { model: "commerce guided search", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.5.1", }, { model: "unified attendant console business edition", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "tealeaf customer experience", scope: "eq", trust: 0.3, vendor: "ibm", version: "9.0", }, { model: "aironet series access points", scope: "ne", trust: 0.3, vendor: "cisco", version: "270016.4", }, { model: "enterprise manager ops center", scope: "eq", trust: 0.3, vendor: "oracle", version: "12.1.4", }, { model: "mds series multilayer switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "90000", }, { model: "prime network services controller 1.01u", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "oss support tools", scope: "eq", trust: 0.3, vendor: "oracle", version: "8.9.15.9.8", }, { model: "firesight system software", scope: "ne", trust: 0.3, vendor: "cisco", version: "5.4.0.10", }, { model: "worklight consumer edition", scope: "eq", trust: 0.3, vendor: "ibm", version: "6.1.0.0", }, { model: "universal small cell series", scope: "eq", trust: 0.3, vendor: "cisco", version: "50000", }, { model: "nexus series switches 5.2 sv3", scope: "ne", trust: 0.3, vendor: "cisco", version: "1000v", }, { model: "telepresence system tx1310", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified communications domain manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence server on multiparty media and", scope: "ne", trust: 0.3, vendor: "cisco", version: "3103204.4", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.0.2", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.1.4", }, { model: "nac guest server", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "enterprise content delivery system", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "email security appliance", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "cognos business intelligence server", scope: "eq", trust: 0.3, vendor: "ibm", version: "10.2.11", }, { model: "anyconnect secure mobility client for linux", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence system ex series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "prime collaboration deployment", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "webex business suite", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "dx series ip phones", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ios and cisco ios xe software", scope: "ne", trust: 0.3, vendor: "cisco", version: "15.5(3)", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.18", }, { model: "anyconnect secure mobility client for android", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series blade switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "40000", }, { model: "sterling connect:express for unix", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.5.0.11", }, { model: "telepresence system", scope: "ne", trust: 0.3, vendor: "cisco", version: "500-376.1", }, { model: "jabber for windows", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.8", }, { model: "telepresence profile series ce8.2.2", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "enterprise manager base platform", scope: "eq", trust: 0.3, vendor: "oracle", version: "13.1.0.0", }, { model: "ace30 application control engine module", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "vm virtualbox", scope: "ne", trust: 0.3, vendor: "oracle", version: "5.0.28", }, { model: "edge digital media player 1.6rb5", scope: "ne", trust: 0.3, vendor: "cisco", version: "300", }, { model: "unified ip phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "69450", }, { model: "telepresence isdn gateway mse", scope: "eq", trust: 0.3, vendor: "cisco", version: "83210", }, { model: "wireless lan controller", scope: "ne", trust: 0.3, vendor: "cisco", version: "8.4", }, { model: "jabber software development kit", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "uc integration for microsoft lync", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6.3", }, { model: "unified contact center enterprise", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6.1", }, { model: "spa112 2-port phone adapter", scope: "ne", trust: 0.3, vendor: "cisco", version: "1.4.2", }, { model: "telepresence system tx1310", scope: "ne", trust: 0.3, vendor: "cisco", version: "6.1", }, { model: "connected grid routers", scope: "ne", trust: 0.3, vendor: "cisco", version: "7.3", }, { model: "commerce experience manager", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.4.1.2", }, { model: "enterprise manager base platform", scope: "eq", trust: 0.3, vendor: "oracle", version: "12.1", }, { model: "i", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.3", }, { model: "telepresence mx series tc7.3.7", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "ip interoperability and collaboration system", scope: "ne", trust: 0.3, vendor: "cisco", version: "5.0(1)", }, { model: "spa122 analog telephone adapter with router", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "universal small cell series", scope: "ne", trust: 0.3, vendor: "cisco", version: "50003.5.12.23", }, { model: "universal small cell series", scope: "eq", trust: 0.3, vendor: "cisco", version: "50003.4.2.0", }, { model: "connected grid routers", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "uc integration for microsoft lync", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unity express", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence system", scope: "eq", trust: 0.3, vendor: "cisco", version: "13000", }, { model: "worklight enterprise edition", scope: "eq", trust: 0.3, vendor: "ibm", version: "6.1.0.0", }, { model: "service delivery manager", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.2.4", }, { model: "tandberg codian isdn gateway", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "jabber guest", scope: "ne", trust: 0.3, vendor: "cisco", version: "11", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.9", }, { model: "digital media manager 5.3.6 rb3", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "series digital media players", scope: "eq", trust: 0.3, vendor: "cisco", version: "44000", }, { model: "ata series analog terminal adaptors", scope: "ne", trust: 0.3, vendor: "cisco", version: "1901.3", }, { model: "prime network services controller", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ata series analog terminal adaptors", scope: "eq", trust: 0.3, vendor: "cisco", version: "1900", }, { model: "asr series", scope: "ne", trust: 0.3, vendor: "cisco", version: "500021.2", }, { model: "ons series multiservice provisioning platforms", scope: "ne", trust: 0.3, vendor: "cisco", version: "1545410.7", }, { model: "sterling connect:express for unix", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.5.0.12", }, { model: "telepresence system series", scope: "eq", trust: 0.3, vendor: "cisco", version: "30000", }, { model: "worklight consumer edition", scope: "eq", trust: 0.3, vendor: "ibm", version: "6.1.0.2", }, { model: "hosted collaboration mediation fulfillment", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified communications manager session management edition", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified ip conference phone 10.3.1sr4", scope: "ne", trust: 0.3, vendor: "cisco", version: "8831", }, { model: "mobilefirst platform foundation", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.1.0.0", }, { model: "webex meetings server multimedia platform", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "nexus series switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "70000", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.1.7", }, { model: "prime network registrar", scope: "ne", trust: 0.3, vendor: "cisco", version: "8.3.5", }, { model: "series stackable managed switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "5000", }, { model: "prime access registrar", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified intelligent contact management enterprise", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6.1", }, { model: "stealthwatch flowcollector netflow", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ucs manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.0.1", }, { model: "webex meetings server", scope: "eq", trust: 0.3, vendor: "cisco", version: "1.0", }, { model: "network analysis module", scope: "ne", trust: 0.3, vendor: "cisco", version: "6.2(2)", }, { model: "video surveillance 4300e and 4500e high-definition ip cameras", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified attendant console department edition", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ip series phones", scope: "eq", trust: 0.3, vendor: "cisco", version: "78000", }, { model: "aironet series access points", scope: "eq", trust: 0.3, vendor: "cisco", version: "27000", }, { model: "onepk all-in-one virtual machine", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "industrial router", scope: "eq", trust: 0.3, vendor: "cisco", version: "9100", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2", }, { model: "unified intelligence center", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video distribution suite for internet streaming", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence system", scope: "ne", trust: 0.3, vendor: "cisco", version: "13006.1", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.7.1", }, { model: "cloupia unified infrastructure controller", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "50000", }, { model: "telepresence system", scope: "ne", trust: 0.3, vendor: "cisco", version: "11006.1", }, { model: "flex system manager", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.3.20", }, { model: "packaged contact center enterprise", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "agent desktop for cisco unified contact center express", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "mobilefirst platform foundation", scope: "eq", trust: 0.3, vendor: "ibm", version: "8.0.0.0", }, { model: "video surveillance series ip cameras", scope: "eq", trust: 0.3, vendor: "cisco", version: "70000", }, { model: "adaptive security appliance", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "secure global desktop", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.2", }, { model: "telepresence sx series tc7.3.7", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "tealeaf customer experience", scope: "eq", trust: 0.3, vendor: "ibm", version: "8.0", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.5", }, { model: "nac appliance clean access server", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "video surveillance series ip cameras", scope: "eq", trust: 0.3, vendor: "cisco", version: "60000", }, { model: "firesight system software", scope: "ne", trust: 0.3, vendor: "cisco", version: "6.1.0.1", }, { model: "webex meetings for windows phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "80", }, { model: "spa232d multi-line dect analog telephone adapter", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "prime optical for service providers", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "smart care", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "edge digital media player 1.2rb1.0.3", scope: "ne", trust: 0.3, vendor: "cisco", version: "340", }, { model: "universal small cell cloudbase factory recovery root filesystem", scope: "eq", trust: 0.3, vendor: "cisco", version: "2.99.4", }, { model: "network performance analysis", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series switches", scope: "ne", trust: 0.3, vendor: "cisco", version: "60006.2.19", }, { model: "unified ip conference phone for third-party call control", scope: "eq", trust: 0.3, vendor: "cisco", version: "88310", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.0", }, { model: "webex meetings for windows phone", scope: "ne", trust: 0.3, vendor: "cisco", version: "82.8", }, { model: "spectrum control", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.10", }, { model: "universal small cell cloudbase factory recovery root filesystem", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "secure access control system", scope: "ne", trust: 0.3, vendor: "cisco", version: "5.8.0.32.7", }, { model: "telepresence integrator c series ce8.2.2", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "secure global desktop", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.3", }, { model: "cognos business intelligence server", scope: "eq", trust: 0.3, vendor: "ibm", version: "10.2.2", }, { model: "webex meetings client hosted", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.13", }, { model: "content security management appliance", scope: "ne", trust: 0.3, vendor: "cisco", version: "6.1.140", }, { model: "security virtual server protection for vmware", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "2.0", }, { model: "stealthwatch udp director", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series switches 5.2.8", scope: "ne", trust: 0.3, vendor: "cisco", version: "6000", }, { model: "intrusion prevention system solutions", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified ip conference phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "88310", }, { model: "jabber client framework components", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "prime ip express", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified sip proxy software", scope: "ne", trust: 0.3, vendor: "cisco", version: "10", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.4", }, { model: "mysql workbench", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.1.4", }, { model: "security manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "jabber for mac", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.8", }, { model: "netflow generation appliance", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified sip proxy software", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified ip phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "99510", }, { model: "unified ip phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "89450", }, { model: "telepresence supervisor mse", scope: "eq", trust: 0.3, vendor: "cisco", version: "80500", }, { model: "telepresence server and mse", scope: "ne", trust: 0.3, vendor: "cisco", version: "701087104.4", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.10", }, { model: "ucs series and series fabric interconnects", scope: "eq", trust: 0.3, vendor: "cisco", version: "620063000", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.12", }, { model: "commerce experience manager", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.2.2", }, { model: "webex meeting center", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.11", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "2.0.4", }, { model: "netflow generation appliance", scope: "ne", trust: 0.3, vendor: "cisco", version: "1.1(1)", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.13", }, { model: "commerce guided search", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.5.2", }, { model: "service delivery manager", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.2.2", }, { model: "secure global desktop", scope: "eq", trust: 0.3, vendor: "oracle", version: "4.71", }, { model: "socialminer", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "webex meetings server", scope: "eq", trust: 0.3, vendor: "cisco", version: "2.0", }, { model: "spa112 2-port phone adapter", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video surveillance series high-definition ip cameras", scope: "ne", trust: 0.3, vendor: "cisco", version: "40002.9", }, { model: "intracer", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "2.0.3", }, { model: "jabber for windows", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "oss support tools", scope: "eq", trust: 0.3, vendor: "oracle", version: "8.8.15.7.15", }, { model: "prime infrastructure", scope: "ne", trust: 0.3, vendor: "cisco", version: "3.2", }, { model: "telepresence video communication server", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video surveillance 4300e and 4500e high-definition ip cameras", scope: "ne", trust: 0.3, vendor: "cisco", version: "2.9", }, { model: "computer telephony integration object server", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6.1", }, { model: "telepresence system", scope: "eq", trust: 0.3, vendor: "cisco", version: "11000", }, { model: "telepresence sx series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence server on multiparty media and", scope: "eq", trust: 0.3, vendor: "cisco", version: "3103200", }, { model: "project openssl", scope: "eq", trust: 0.3, vendor: "openssl", version: "1.1", }, { model: "content security appliance update servers", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1", }, { model: "videoscape anyres live", scope: "ne", trust: 0.3, vendor: "cisco", version: "9.7.2", }, { model: "unified ip phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "99710", }, { model: "firesight system software", scope: "ne", trust: 0.3, vendor: "cisco", version: "5.4.1.9", }, { model: "universal small cell iuh", scope: "ne", trust: 0.3, vendor: "cisco", version: "3.17.3", }, { model: "ata analog telephone adaptor", scope: "eq", trust: 0.3, vendor: "cisco", version: "1870", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.1.1", }, { model: "ios and cisco ios xe software", scope: "ne", trust: 0.3, vendor: "cisco", version: "16.4", }, { model: "telepresence system", scope: "ne", trust: 0.3, vendor: "cisco", version: "500-326.1", }, { model: "unity express", scope: "ne", trust: 0.3, vendor: "cisco", version: "10", }, { model: "expressway series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "virtualization experience media edition", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.8", }, { model: "vm virtualbox", scope: "ne", trust: 0.3, vendor: "oracle", version: "5.1.8", }, { model: "small business series managed switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "3000", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "2.0.6", }, { model: "telepresence system", scope: "ne", trust: 0.3, vendor: "cisco", version: "10006.1", }, { model: "telepresence isdn gateway", scope: "eq", trust: 0.3, vendor: "cisco", version: "32410", }, { model: "telepresence mcu", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "edge digital media player", scope: "eq", trust: 0.3, vendor: "cisco", version: "3000", }, { model: "series smart plus switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "2200", }, { model: "enterprise manager ops center", scope: "eq", trust: 0.3, vendor: "oracle", version: "12.2.2", }, { model: "nexus series switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "1000v0", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.5.1", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.1.6", }, { model: "virtual security gateway", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "rational insight", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.1.5", }, { model: "telepresence tx9000 series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "series digital media players", scope: "eq", trust: 0.3, vendor: "cisco", version: "43000", }, { model: "telepresence system series", scope: "ne", trust: 0.3, vendor: "cisco", version: "30006.1", }, { model: "universal small cell series", scope: "eq", trust: 0.3, vendor: "cisco", version: "70003.4.2.0", }, { model: "unity connection", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "security manager", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.13", }, { model: "ucs b-series blade servers", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ucs standalone c-series rack server integrated management cont", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "telepresence integrator c series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "spectrum control", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.9", }, { model: "enterprise content delivery system", scope: "ne", trust: 0.3, vendor: "cisco", version: "2.6.9", }, { model: "nexus series switches", scope: "eq", trust: 0.3, vendor: "cisco", version: "60000", }, { model: "commerce experience manager", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.5.1", }, { model: "service delivery manager", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.2.3", }, { model: "mds series multilayer switches 5.2.8", scope: "ne", trust: 0.3, vendor: "cisco", version: "9000", }, { model: "series digital media players 5.4.1 rb4", scope: "ne", trust: 0.3, vendor: "cisco", version: "4300", }, { model: "ucs standalone c-series rack server integrated management cont", scope: "ne", trust: 0.3, vendor: "cisco", version: "-3.0", }, { model: "ios and cisco ios xe software", scope: "ne", trust: 0.3, vendor: "cisco", version: "16.1", }, { model: "prime network", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence tx9000 series", scope: "ne", trust: 0.3, vendor: "cisco", version: "6.1", }, { model: "prime performance manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "tealeaf customer experience on cloud network capture add-on", scope: "eq", trust: 0.3, vendor: "ibm", version: "16.1.01", }, { model: "smart net total care local collector appliance", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "prime collaboration provisioning", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.12", }, { model: "project openssl 1.1.0a", scope: "ne", trust: 0.3, vendor: "openssl", version: null, }, { model: "connected grid routers", scope: "ne", trust: 0.3, vendor: "cisco", version: "15.8.9", }, { model: "network analysis module", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "commerce experience manager", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.5.2", }, { model: "nexus series fabric switches aci mode", scope: "eq", trust: 0.3, vendor: "cisco", version: "9000-0", }, { model: "prime performance manager sp1611", scope: "ne", trust: 0.3, vendor: "cisco", version: "1.7", }, { model: "worklight consumer edition", scope: "eq", trust: 0.3, vendor: "ibm", version: "6.1.0.1", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.12", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.22", }, { model: "unified ip phone 9.3 sr3", scope: "ne", trust: 0.3, vendor: "cisco", version: "6901", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.16", }, { model: "telepresence server and mse", scope: "eq", trust: 0.3, vendor: "cisco", version: "701087100", }, { model: "mds series multilayer switches", scope: "ne", trust: 0.3, vendor: "cisco", version: "90006.2.19", }, { model: "aironet series access points", scope: "ne", trust: 0.3, vendor: "cisco", version: "270015.5(3)", }, { model: "spectrum control", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.11", }, { model: "telepresence server on virtual machine", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "webex meetings for android", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "nexus series switches 5.2.8", scope: "ne", trust: 0.3, vendor: "cisco", version: "5000", }, { model: "digital media manager 5.4.1 rb4", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "unified workforce optimization quality management solution", scope: "eq", trust: 0.3, vendor: "cisco", version: "-0", }, { model: "telepresence integrator c series tc7.3.7", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "spa122 analog telephone adapter with router", scope: "ne", trust: 0.3, vendor: "cisco", version: "1.4.2", }, { model: "cloud object storage", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "sterling connect:express for unix", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.4", }, { model: "rrdi", scope: "eq", trust: 0.3, vendor: "ibm", version: "2.0.1", }, { model: "worklight enterprise edition", scope: "eq", trust: 0.3, vendor: "ibm", version: "6.1.0.2", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.14", }, { model: "unified intelligent contact management enterprise", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "application and content networking system", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "anyconnect secure mobility client for ios", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ace application control engine", scope: "eq", trust: 0.3, vendor: "cisco", version: "47100", }, { model: "oss support tools", scope: "ne", trust: 0.3, vendor: "oracle", version: "8.15.17.3.14", }, { model: "anyconnect secure mobility client for mac os", scope: "eq", trust: 0.3, vendor: "cisco", version: "x0", }, { model: "commerce guided search", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.4.1.2", }, { model: "tealeaf customer experience", scope: "eq", trust: 0.3, vendor: "ibm", version: "9.0.2", }, { model: "prime infrastructure plug and play standalone gateway", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "virtual security gateway", scope: "ne", trust: 0.3, vendor: "cisco", version: "2.1.6", }, { model: "nexus series switches", scope: "ne", trust: 0.3, vendor: "cisco", version: "50006.2.19", }, { model: "telepresence conductor", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "application policy infrastructure controller", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "jabber for mac", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "jabber for iphone and ipad", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.8", }, { model: "prime network registrar", scope: "ne", trust: 0.3, vendor: "cisco", version: "9.0", }, { model: "i", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.1", }, { model: "worklight enterprise edition", scope: "eq", trust: 0.3, vendor: "ibm", version: "6.1.0.1", }, { model: "telepresence video communication server", scope: "ne", trust: 0.3, vendor: "cisco", version: "x8.8.3", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.4.1", }, { model: "series digital media players 5.4.1 rb4", scope: "ne", trust: 0.3, vendor: "cisco", version: "4400", }, { model: "sterling connect:express for unix", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.5.0", }, { model: "multicast manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "aironet series access points", scope: "ne", trust: 0.3, vendor: "cisco", version: "270016.3", }, { model: "cognos business intelligence server", scope: "eq", trust: 0.3, vendor: "ibm", version: "10.2", }, { model: "anyconnect secure mobility client for ios", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.0.7", }, { model: "secure access control system", scope: "ne", trust: 0.3, vendor: "cisco", version: "5.8.0.32.8", }, { model: "webex node for mcs", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence mcu", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.5(1.89)", }, { model: "management appliance", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "anyconnect secure mobility client for windows", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.0.7", }, { model: "videoscape anyres live", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video surveillance ptz ip cameras", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video distribution suite for internet streaming", scope: "ne", trust: 0.3, vendor: "cisco", version: "4.003(002)", }, { model: "telepresence server on multiparty media", scope: "ne", trust: 0.3, vendor: "cisco", version: "8204.4", }, { model: "telepresence serial gateway series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "i", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.2", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.3", }, { model: "unified ip phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "89610", }, { model: "expressway series", scope: "ne", trust: 0.3, vendor: "cisco", version: "x8.8.3", }, { model: "commerce guided search", scope: "eq", trust: 0.3, vendor: "oracle", version: "6.3", }, { model: "prime network", scope: "ne", trust: 0.3, vendor: "cisco", version: "431", }, { model: "telepresence system", scope: "eq", trust: 0.3, vendor: "cisco", version: "500-320", }, { model: "unified attendant console enterprise edition", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified contact center express", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "vm virtualbox", scope: "eq", trust: 0.3, vendor: "oracle", version: "5.0.26", }, { model: "network analysis module 6.2", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "telepresence system ex series ce8.2.2", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "prime data center network manager", scope: "eq", trust: 0.3, vendor: "cisco", version: null, }, { model: "mxe series media experience engines", scope: "eq", trust: 0.3, vendor: "cisco", version: "35000", }, { model: "universal small cell cloudbase factory recovery root filesystem", scope: "ne", trust: 0.3, vendor: "cisco", version: "3.17.3", }, { model: "videoscape control suite", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified communications manager", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "ip series phones vpn feature", scope: "eq", trust: 0.3, vendor: "cisco", version: "8800-0", }, { model: "tandberg codian mse", scope: "eq", trust: 0.3, vendor: "cisco", version: "83200", }, { model: "flex system manager", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.3.3.0", }, { model: "mobilefirst platform foundation", scope: "eq", trust: 0.3, vendor: "ibm", version: "7.0.0.0", }, { model: "enterprise manager base platform", scope: "eq", trust: 0.3, vendor: "oracle", version: "13.2.0.0", }, { model: "tealeaf customer experience", scope: "eq", trust: 0.3, vendor: "ibm", version: "8.6", }, { model: "unified meetingplace 8.6mr1", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "telepresence mx series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "tapi service provider", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "video surveillance series ip cameras", scope: "ne", trust: 0.3, vendor: "cisco", version: "70002.9", }, { model: "telepresence system", scope: "eq", trust: 0.3, vendor: "cisco", version: "500-370", }, { model: "spa525g 5-line ip phone", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "telepresence profile series", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "secure access control system", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "unified ip conference phone for third-party call control 9.3 sr3", scope: "ne", trust: 0.3, vendor: "cisco", version: "8831", }, { model: "unified ip series phones", scope: "eq", trust: 0.3, vendor: "cisco", version: "79000", }, { model: "spa232d multi-line dect analog telephone adapter", scope: "ne", trust: 0.3, vendor: "cisco", version: "1.4.2", }, { model: "nexus series fabric switches aci mode", scope: "ne", trust: 0.3, vendor: "cisco", version: "9000-0", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.6", }, { model: "visual quality experience tools server", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "virtualization experience media edition", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "enterprise manager ops center", scope: "eq", trust: 0.3, vendor: "oracle", version: "12.3.2", }, { model: "emergency responder", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "tivoli storage productivity center", scope: "eq", trust: 0.3, vendor: "ibm", version: "5.2.7", }, { model: "registered envelope service", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "universal small cell series", scope: "ne", trust: 0.3, vendor: "cisco", version: "70003.5.12.23", }, { model: "firesight system software", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "webex meetings client hosted t32", scope: "ne", trust: 0.3, vendor: "cisco", version: null, }, { model: "unified meetingplace", scope: "eq", trust: 0.3, vendor: "cisco", version: "0", }, { model: "security virtual server protection for vmware", scope: "eq", trust: 0.3, vendor: "ibm", version: "1.1.1", }, { model: "unified contact center express", scope: "ne", trust: 0.3, vendor: "cisco", version: "11.6", }, { model: "webex meetings server", scope: "ne", trust: 0.3, vendor: "cisco", version: "2.6.1.30", }, ], sources: [ { db: "BID", id: "93149", }, { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "NVD", id: "CVE-2016-6305", }, { db: "CNNVD", id: "CNNVD-201609-594", }, ], }, configurations: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", children: { "@container": "@list", }, cpe_match: { "@container": "@list", }, data: { "@container": "@list", }, nodes: { "@container": "@list", }, }, data: [ { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, ], sources: [ { db: "NVD", id: "CVE-2016-6305", }, ], }, credits: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.", sources: [ { db: "CNNVD", id: "CNNVD-201609-594", }, ], trust: 0.6, }, cve: "CVE-2016-6305", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { acInsufInfo: false, accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "NVD", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", exploitabilityScore: 10, impactScore: 2.9, integrityImpact: "NONE", obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", trust: 1, userInteractionRequired: false, vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, { acInsufInfo: null, accessComplexity: "Low", accessVector: "Network", authentication: "None", author: "NVD", availabilityImpact: "Partial", baseScore: 5, confidentialityImpact: "None", exploitabilityScore: null, id: "CVE-2016-6305", impactScore: null, integrityImpact: "None", obtainAllPrivilege: null, obtainOtherPrivilege: null, obtainUserPrivilege: null, severity: "Medium", trust: 0.9, userInteractionRequired: null, vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, ], cvssV3: [ { attackComplexity: "LOW", attackVector: "NETWORK", author: "NVD", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", exploitabilityScore: 3.9, impactScore: 3.6, integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", trust: 1, userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, { attackComplexity: "Low", attackVector: "Network", author: "NVD", availabilityImpact: "High", baseScore: 7.5, baseSeverity: "High", confidentialityImpact: "None", exploitabilityScore: null, id: "CVE-2016-6305", impactScore: null, integrityImpact: "None", privilegesRequired: "None", scope: "Unchanged", trust: 0.8, userInteraction: "None", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, ], severity: [ { author: "NVD", id: "CVE-2016-6305", trust: 1.8, value: "HIGH", }, { author: "CNNVD", id: "CNNVD-201609-594", trust: 0.6, value: "HIGH", }, { author: "VULMON", id: "CVE-2016-6305", trust: 0.1, value: "MEDIUM", }, ], }, ], sources: [ { db: "VULMON", id: "CVE-2016-6305", }, { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "NVD", id: "CVE-2016-6305", }, { db: "CNNVD", id: "CNNVD-201609-594", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call. OpenSSL is prone to denial-of-service vulnerability. \nAn attacker may exploit this issue to cause a denial-of-service condition. \nOpenSSL version 1.1.0 is vulnerable. \n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201612-16\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n Title: OpenSSL: Multiple vulnerabilities\n Date: December 07, 2016\n Bugs: #581234, #585142, #585276, #591454, #592068, #592074,\n #592082, #594500, #595186\n ID: 201612-16\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in OpenSSL, the worst of which\nallows attackers to conduct a time based side-channel attack. \n\nBackground\n==========\n\nOpenSSL is an Open Source toolkit implementing the Secure Sockets Layer\n(SSL v2/v3) and Transport Layer Security (TLS v1) as well as a general\npurpose cryptography library. \n\nAffected packages\n=================\n\n -------------------------------------------------------------------\n Package / Vulnerable / Unaffected\n -------------------------------------------------------------------\n 1 dev-libs/openssl < 1.0.2j >= 1.0.2j\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in OpenSSL. Please review\nthe CVE identifiers and the International Association for Cryptologic\nResearch's (IACR) paper, \"Make Sure DSA Signing Exponentiations Really\nare Constant-Time\" for further details. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll OpenSSL users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \">=dev-libs/openssl-1.0.2j\"\n\nReferences\n==========\n\n[ 1 ] CVE-2016-2105\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2105\n[ 2 ] CVE-2016-2106\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2106\n[ 3 ] CVE-2016-2107\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2107\n[ 4 ] CVE-2016-2108\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2108\n[ 5 ] CVE-2016-2109\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2109\n[ 6 ] CVE-2016-2176\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2176\n[ 7 ] CVE-2016-2177\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2177\n[ 8 ] CVE-2016-2178\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2178\n[ 9 ] CVE-2016-2180\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2180\n[ 10 ] CVE-2016-2183\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2183\n[ 11 ] CVE-2016-6304\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6304\n[ 12 ] CVE-2016-6305\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6305\n[ 13 ] CVE-2016-6306\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6306\n[ 14 ] CVE-2016-7052\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7052\n[ 15 ] Make Sure DSA Signing Exponentiations Really are Constant-Time\n http://eprint.iacr.org/2016/594.pdf\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201612-16\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users' machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2016 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n\n. \nOpenSSL Security Advisory [22 Sep 2016]\n========================================\n\nOCSP Status Request extension unbounded memory growth (CVE-2016-6304)\n=====================================================================\n\nSeverity: High\n\nA malicious client can send an excessively large OCSP Status Request extension. \nIf that client continually requests renegotiation, sending a large OCSP Status\nRequest extension each time, then there will be unbounded memory growth on the\nserver. This will eventually lead to a Denial Of Service attack through memory\nexhaustion. Servers with a default configuration are vulnerable even if they do\nnot support OCSP. Builds using the \"no-ocsp\" build time option are not affected. \n\nServers using OpenSSL versions prior to 1.0.1g are not vulnerable in a default\nconfiguration, instead only if an application explicitly enables OCSP stapling\nsupport. \n\nOpenSSL 1.1.0 users should upgrade to 1.1.0a\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 29th August 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Matt Caswell of the OpenSSL\ndevelopment team. \n\nSSL_peek() hang on empty record (CVE-2016-6305)\n===============================================\n\nSeverity: Moderate\n\nOpenSSL 1.1.0 SSL/TLS will hang during a call to SSL_peek() if the peer sends an\nempty record. This could be exploited by a malicious peer in a Denial Of Service\nattack. \n\nOpenSSL 1.1.0 users should upgrade to 1.1.0a\n\nThis issue was reported to OpenSSL on 10th September 2016 by Alex Gaynor. The\nfix was developed by Matt Caswell of the OpenSSL development team. \n\nSWEET32 Mitigation (CVE-2016-2183)\n==================================\n\nSeverity: Low\n\nSWEET32 (https://sweet32.info) is an attack on older block cipher algorithms\nthat use a block size of 64 bits. In mitigation for the SWEET32 attack DES based\nciphersuites have been moved from the HIGH cipherstring group to MEDIUM in\nOpenSSL 1.0.1 and OpenSSL 1.0.2. OpenSSL 1.1.0 since release has had these\nciphersuites disabled by default. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 16th August 2016 by Karthikeyan\nBhargavan and Gaetan Leurent (INRIA). The fix was developed by Rich Salz of the\nOpenSSL development team. \n\nOOB write in MDC2_Update() (CVE-2016-6303)\n==========================================\n\nSeverity: Low\n\nAn overflow can occur in MDC2_Update() either if called directly or\nthrough the EVP_DigestUpdate() function using MDC2. If an attacker\nis able to supply very large amounts of input data after a previous\ncall to EVP_EncryptUpdate() with a partial block then a length check\ncan overflow resulting in a heap corruption. \n\nThe amount of data needed is comparable to SIZE_MAX which is impractical\non most platforms. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 11th August 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL\ndevelopment team. \n\nMalformed SHA512 ticket DoS (CVE-2016-6302)\n===========================================\n\nSeverity: Low\n\nIf a server uses SHA512 for TLS session ticket HMAC it is vulnerable to a\nDoS attack where a malformed ticket will result in an OOB read which will\nultimately crash. \n\nThe use of SHA512 in TLS session tickets is comparatively rare as it requires\na custom server callback and ticket lookup mechanism. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 19th August 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL\ndevelopment team. \n\nOOB write in BN_bn2dec() (CVE-2016-2182)\n========================================\n\nSeverity: Low\n\nThe function BN_bn2dec() does not check the return value of BN_div_word(). \nThis can cause an OOB write if an application uses this function with an\noverly large BIGNUM. This could be a problem if an overly large certificate\nor CRL is printed out from an untrusted source. TLS is not affected because\nrecord limits will reject an oversized certificate before it is parsed. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 2nd August 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL\ndevelopment team. \n\nOOB read in TS_OBJ_print_bio() (CVE-2016-2180)\n==============================================\n\nSeverity: Low\n\nThe function TS_OBJ_print_bio() misuses OBJ_obj2txt(): the return value is\nthe total length the OID text representation would use and not the amount\nof data written. This will result in OOB reads when large OIDs are presented. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 21st July 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL\ndevelopment team. \n\nPointer arithmetic undefined behaviour (CVE-2016-2177)\n======================================================\n\nSeverity: Low\n\nAvoid some undefined pointer arithmetic\n\nA common idiom in the codebase is to check limits in the following manner:\n\"p + len > limit\"\n\nWhere \"p\" points to some malloc'd data of SIZE bytes and\nlimit == p + SIZE\n\n\"len\" here could be from some externally supplied data (e.g. from a TLS\nmessage). \n\nThe rules of C pointer arithmetic are such that \"p + len\" is only well\ndefined where len <= SIZE. Therefore the above idiom is actually\nundefined behaviour. \n\nFor example this could cause problems if some malloc implementation\nprovides an address for \"p\" such that \"p + len\" actually overflows for\nvalues of len that are too big and therefore p + len < limit. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 4th May 2016 by Guido Vranken. The\nfix was developed by Matt Caswell of the OpenSSL development team. \n\nConstant time flag not preserved in DSA signing (CVE-2016-2178)\n===============================================================\n\nSeverity: Low\n\nOperations in the DSA signing algorithm should run in constant time in order to\navoid side channel attacks. A flaw in the OpenSSL DSA implementation means that\na non-constant time codepath is followed for certain operations. This has been\ndemonstrated through a cache-timing attack to be sufficient for an attacker to\nrecover the private DSA key. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 23rd May 2016 by César Pereida (Aalto\nUniversity), Billy Brumley (Tampere University of Technology), and Yuval Yarom\n(The University of Adelaide and NICTA). The fix was developed by César Pereida. \n\nDTLS buffered message DoS (CVE-2016-2179)\n=========================================\n\nSeverity: Low\n\nIn a DTLS connection where handshake messages are delivered out-of-order those\nmessages that OpenSSL is not yet ready to process will be buffered for later\nuse. Under certain circumstances, a flaw in the logic means that those messages\ndo not get removed from the buffer even though the handshake has been completed. \nAn attacker could force up to approx. 15 messages to remain in the buffer when\nthey are no longer required. These messages will be cleared when the DTLS\nconnection is closed. The default maximum size for a message is 100k. Therefore\nthe attacker could force an additional 1500k to be consumed per connection. By\nopening many simulataneous connections an attacker could cause a DoS attack\nthrough memory exhaustion. \n\nOpenSSL 1.0.2 DTLS users should upgrade to 1.0.2i\nOpenSSL 1.0.1 DTLS users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 22nd June 2016 by Quan Luo. The fix was\ndeveloped by Matt Caswell of the OpenSSL development team. \n\nDTLS replay protection DoS (CVE-2016-2181)\n==========================================\n\nSeverity: Low\n\nA flaw in the DTLS replay attack protection mechanism means that records that\narrive for future epochs update the replay protection \"window\" before the MAC\nfor the record has been validated. This could be exploited by an attacker by\nsending a record for the next epoch (which does not have to decrypt or have a\nvalid MAC), with a very large sequence number. This means that all subsequent\nlegitimate packets are dropped causing a denial of service for a specific\nDTLS connection. \n\nOpenSSL 1.0.2 DTLS users should upgrade to 1.0.2i\nOpenSSL 1.0.1 DTLS users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 21st November 2015 by the OCAP audit team. \nThe fix was developed by Matt Caswell of the OpenSSL development team. \n\nCertificate message OOB reads (CVE-2016-6306)\n=============================================\n\nSeverity: Low\n\nIn OpenSSL 1.0.2 and earlier some missing message length checks can result in\nOOB reads of up to 2 bytes beyond an allocated buffer. There is a theoretical\nDoS risk but this has not been observed in practice on common platforms. \n\nThe messages affected are client certificate, client certificate request and\nserver certificate. As a result the attack can only be performed against\na client or a server which enables client authentication. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2i\nOpenSSL 1.0.1 users should upgrade to 1.0.1u\n\nThis issue was reported to OpenSSL on 22nd August 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Stephen Henson of the OpenSSL\ndevelopment team. \n\nExcessive allocation of memory in tls_get_message_header() (CVE-2016-6307)\n==========================================================================\n\nSeverity: Low\n\nA TLS message includes 3 bytes for its length in the header for the message. \nThis would allow for messages up to 16Mb in length. Messages of this length are\nexcessive and OpenSSL includes a check to ensure that a peer is sending\nreasonably sized messages in order to avoid too much memory being consumed to\nservice a connection. A flaw in the logic of version 1.1.0 means that memory for\nthe message is allocated too early, prior to the excessive message length\ncheck. Due to way memory is allocated in OpenSSL this could mean an attacker\ncould force up to 21Mb to be allocated to service a connection. This could lead\nto a Denial of Service through memory exhaustion. However, the excessive message\nlength check still takes place, and this would cause the connection to\nimmediately fail. Assuming that the application calls SSL_free() on the failed\nconneciton in a timely manner then the 21Mb of allocated memory will then be\nimmediately freed again. Therefore the excessive memory allocation will be\ntransitory in nature. This then means that there is only a security impact if:\n\n1) The application does not call SSL_free() in a timely manner in the\nevent that the connection fails\nor\n2) The application is working in a constrained environment where there\nis very little free memory\nor\n3) The attacker initiates multiple connection attempts such that there\nare multiple connections in a state where memory has been allocated for\nthe connection; SSL_free() has not yet been called; and there is\ninsufficient memory to service the multiple requests. \n\nExcept in the instance of (1) above any Denial Of Service is likely to\nbe transitory because as soon as the connection fails the memory is\nsubsequently freed again in the SSL_free() call. However there is an\nincreased risk during this period of application crashes due to the lack\nof memory - which would then mean a more serious Denial of Service. \n\nThis issue does not affect DTLS users. \n\nOpenSSL 1.1.0 TLS users should upgrade to 1.1.0a\n\nThis issue was reported to OpenSSL on 18th September 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Matt Caswell of the OpenSSL\ndevelopment team. \n\nExcessive allocation of memory in dtls1_preprocess_fragment() (CVE-2016-6308)\n=============================================================================\n\nSeverity: Low\n\nThis issue is very similar to CVE-2016-6307. The underlying defect is different\nbut the security analysis and impacts are the same except that it impacts DTLS. \n\nA DTLS message includes 3 bytes for its length in the header for the message. \nThis would allow for messages up to 16Mb in length. Messages of this length are\nexcessive and OpenSSL includes a check to ensure that a peer is sending\nreasonably sized messages in order to avoid too much memory being consumed to\nservice a connection. A flaw in the logic of version 1.1.0 means that memory for\nthe message is allocated too early, prior to the excessive message length\ncheck. Due to way memory is allocated in OpenSSL this could mean an attacker\ncould force up to 21Mb to be allocated to service a connection. This could lead\nto a Denial of Service through memory exhaustion. However, the excessive message\nlength check still takes place, and this would cause the connection to\nimmediately fail. Assuming that the application calls SSL_free() on the failed\nconneciton in a timely manner then the 21Mb of allocated memory will then be\nimmediately freed again. Therefore the excessive memory allocation will be\ntransitory in nature. This then means that there is only a security impact if:\n\n1) The application does not call SSL_free() in a timely manner in the\nevent that the connection fails\nor\n2) The application is working in a constrained environment where there\nis very little free memory\nor\n3) The attacker initiates multiple connection attempts such that there\nare multiple connections in a state where memory has been allocated for\nthe connection; SSL_free() has not yet been called; and there is\ninsufficient memory to service the multiple requests. \n\nExcept in the instance of (1) above any Denial Of Service is likely to\nbe transitory because as soon as the connection fails the memory is\nsubsequently freed again in the SSL_free() call. However there is an\nincreased risk during this period of application crashes due to the lack\nof memory - which would then mean a more serious Denial of Service. \n\nThis issue does not affect TLS users. \n\nOpenSSL 1.1.0 DTLS users should upgrade to 1.1.0a\n\nThis issue was reported to OpenSSL on 18th September 2016 by Shi Lei (Gear Team,\nQihoo 360 Inc.). The fix was developed by Matt Caswell of the OpenSSL\ndevelopment team. \n\nNote\n====\n\nAs per our previous announcements and our Release Strategy\n(https://www.openssl.org/policies/releasestrat.html), support for OpenSSL\nversion 1.0.1 will cease on 31st December 2016. No security updates for that\nversion will be provided after that date. Users of 1.0.1 are advised to\nupgrade. \n\nSupport for versions 0.9.8 and 1.0.0 ended on 31st December 2015. Those\nversions are no longer receiving security updates. \n\nReferences\n==========\n\nURL for this Security Advisory:\nhttps://www.openssl.org/news/secadv/20160922.txt\n\nNote: the online version of the advisory may be updated with additional details\nover time. \n\nFor details of OpenSSL severity classifications please see:\nhttps://www.openssl.org/policies/secpolicy.html\n", sources: [ { db: "NVD", id: "CVE-2016-6305", }, { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "BID", id: "93149", }, { db: "VULMON", id: "CVE-2016-6305", }, { db: "PACKETSTORM", id: "140056", }, { db: "PACKETSTORM", id: "169633", }, ], trust: 2.16, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2016-6305", trust: 3, }, { db: "BID", id: "93149", trust: 2, }, { db: "SIEMENS", id: "SSA-412672", trust: 1.7, }, { db: "SECTRACK", id: "1036879", trust: 1.7, }, { db: "TENABLE", id: "TNS-2016-21", trust: 1.7, }, { db: "TENABLE", id: "TNS-2016-20", trust: 1.7, }, { db: "TENABLE", id: "TNS-2016-16", trust: 1.7, }, { db: "JUNIPER", id: "JSA10759", trust: 1.7, }, { db: "JVN", id: "JVNVU98667810", trust: 0.8, }, { db: "JVNDB", id: "JVNDB-2016-004991", trust: 0.8, }, { db: "CNNVD", id: "CNNVD-201609-594", trust: 0.6, }, { db: "ICS CERT", id: "ICSA-22-349-21", trust: 0.1, }, { db: "VULMON", id: "CVE-2016-6305", trust: 0.1, }, { db: "PACKETSTORM", id: "140056", trust: 0.1, }, { db: "PACKETSTORM", id: "169633", trust: 0.1, }, ], sources: [ { db: "VULMON", id: "CVE-2016-6305", }, { db: "BID", id: "93149", }, { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "PACKETSTORM", id: "140056", }, { db: "PACKETSTORM", id: "169633", }, { db: "NVD", id: "CVE-2016-6305", }, { db: "CNNVD", id: "CNNVD-201609-594", }, ], }, id: "VAR-201609-0349", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "VARIoT devices database", id: null, }, ], trust: 0.3797576935714285, }, last_update_date: "2023-12-25T21:44:27.109000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "cisco-sa-20160927-openssl", trust: 0.8, url: "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20160927-openssl", }, { title: "OpenSSL 1.1.0 hangs (CPU pegged) when SSL_peek is used with TLSv1 #1563", trust: 0.8, url: "https://github.com/openssl/openssl/issues/1563", }, { title: "1995039", trust: 0.8, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { title: "NV17-001", trust: 0.8, url: "http://jpn.nec.com/security-info/secinfo/nv17-001.html", }, { title: "OpenSSL 1.1.0 Series Release Notes", trust: 0.8, url: "https://www.openssl.org/news/openssl-1.1.0-notes.html", }, { title: "Fix a hang with SSL_peek()", trust: 0.8, url: "https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9", }, { title: "SSL_peek() hang on empty record (CVE-2016-6305)", trust: 0.8, url: "https://www.openssl.org/news/secadv/20160922.txt", }, { title: "Oracle Critical Patch Update Advisory - October 2016", trust: 0.8, url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { title: "SA132", trust: 0.8, url: "https://bto.bluecoat.com/security-advisory/sa132", }, { title: "SA40312", trust: 0.8, url: "https://kb.pulsesecure.net/articles/pulse_security_advisories/sa40312", }, { title: "JSA10759", trust: 0.8, url: "http://kb.juniper.net/infocenter/index?page=content&id=jsa10759", }, { title: "TNS-2016-16", trust: 0.8, url: "https://www.tenable.com/security/tns-2016-16", }, { title: "OpenSSL Security vulnerabilities", trust: 0.6, url: "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=64372", }, { title: "The Register", trust: 0.2, url: "https://www.theregister.co.uk/2016/09/23/openssl_swats_a_dozen_bugs_one_notable_nasty/", }, { title: "Red Hat: CVE-2016-6305", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=cve-2016-6305", }, { title: "Oracle: Oracle Critical Patch Update Advisory - January 2017", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=69e9536e77203a3c76b24dd89f4f9300", }, { title: "Tenable Security Advisories: [R7] Nessus 6.9 Fixes Multiple Vulnerabilities", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=tns-2016-16", }, { title: "Symantec Security Advisories: SA132 : OpenSSL Vulnerabilities 22-Sep-2016 and 26-Sep-2016", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=symantec_security_advisories&qid=1e6dcaf5dac6ef96a7d917a8c1393040", }, { title: "Cisco: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-20160927-openssl", }, { title: "Oracle: Oracle Critical Patch Update Advisory - October 2016", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=05aabe19d38058b7814ef5514aab4c0c", }, { title: "Tenable Security Advisories: [R3] PVS 5.2.0 Fixes Multiple Third-party Library Vulnerabilities", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=tns-2016-20", }, { title: "Tenable Security Advisories: [R2] LCE 4.8.2 Fixes Multiple Third-party Library Vulnerabilities", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=tns-2016-21", }, { title: "Oracle: Oracle Critical Patch Update Advisory - July 2017", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=2f446a7e1ea263c0c3a365776c6713f2", }, { title: "Forcepoint Security Advisories: CVE-2016-2180 to -2183, -6302 to -6309, -2179, -7052 OpenSSL Vulnerabilities", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=forcepoint_security_advisories&qid=a9dd8a175d084c7432b7ad47715ac50c", }, { title: "Oracle: Oracle Critical Patch Update Advisory - April 2018", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=4019ca77f50c7a34e4d97833e6f3321e", }, { title: "Oracle: Oracle Critical Patch Update Advisory - April 2017", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=143b3fb255063c81571469eaa3cf0a87", }, { title: "Oracle: Oracle Critical Patch Update Advisory - October 2017", trust: 0.1, url: "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=523d3f220a64ff01dd95e064bd37566a", }, { title: "hackerone-publicy-disclosed", trust: 0.1, url: "https://github.com/imhunterand/hackerone-publicy-disclosed ", }, { title: "OpenSSL-CVE-lib", trust: 0.1, url: "https://github.com/chnzzh/openssl-cve-lib ", }, ], sources: [ { db: "VULMON", id: "CVE-2016-6305", }, { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "CNNVD", id: "CNNVD-201609-594", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-20", trust: 1.8, }, ], sources: [ { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "NVD", id: "CVE-2016-6305", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 2, url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { trust: 2, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { trust: 1.8, url: "https://www.openssl.org/news/secadv/20160922.txt", }, { trust: 1.8, url: "http://www.securityfocus.com/bid/93149", }, { trust: 1.8, url: "https://security.gentoo.org/glsa/201612-16", }, { trust: 1.7, url: "https://github.com/openssl/openssl/issues/1563", }, { trust: 1.7, url: "https://bto.bluecoat.com/security-advisory/sa132", }, { trust: 1.7, url: "http://kb.juniper.net/infocenter/index?page=content&id=jsa10759", }, { trust: 1.7, url: "https://www.tenable.com/security/tns-2016-16", }, { trust: 1.7, url: "http://www.securitytracker.com/id/1036879", }, { trust: 1.7, url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { trust: 1.7, url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { trust: 1.7, url: "https://www.tenable.com/security/tns-2016-21", }, { trust: 1.7, url: "https://www.tenable.com/security/tns-2016-20", }, { trust: 1.7, url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { trust: 1.7, url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { trust: 1.7, url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, { trust: 1.1, url: "https://git.openssl.org/?p=openssl.git%3ba=commit%3bh=63658103d4441924f8dbfc517b99bb54758a98b9", }, { trust: 0.9, url: "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20160927-openssl", }, { trust: 0.8, url: "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6305", }, { trust: 0.8, url: "http://jvn.jp/vu/jvnvu98667810/index.html", }, { trust: 0.8, url: "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6305", }, { trust: 0.8, url: "http://www.bizmobile.co.jp/news_02.php?id=4069&nc=1", }, { trust: 0.6, url: "https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9", }, { trust: 0.3, url: "http://openssl.org/", }, { trust: 0.3, url: "https://www.ibm.com/blogs/psirt/ibm-security-bulletin-multiple-vulnerabilities-in-openssl-affect-ibm-worklight-and-ibm-mobilefirst-platform-foundation-2/", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=isg3t1024507", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=nas8n1021643", }, { trust: 0.3, url: "https://www.openssl.org/news/vulnerabilities.html", }, { trust: 0.3, url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html", }, { trust: 0.3, url: "http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21993061", }, { trust: 0.3, url: "http://www.ibm.com/support/docview.wss?uid=swg21994534", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21994861", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995129", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995392", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995393", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995691", }, { trust: 0.3, url: "http://www-01.ibm.com/support/docview.wss?uid=swg2c1000242", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2180", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2178", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2177", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2016-6306", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2016-6304", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2016-6305", }, { trust: 0.2, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2183", }, { trust: 0.1, url: "https://cwe.mitre.org/data/definitions/20.html", }, { trust: 0.1, url: "https://nvd.nist.gov", }, { trust: 0.1, url: "https://access.redhat.com/security/cve/cve-2016-6305", }, { trust: 0.1, url: "https://github.com/imhunterand/hackerone-publicy-disclosed", }, { trust: 0.1, url: "https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-21", }, { trust: 0.1, url: "http://tools.cisco.com/security/center/viewalert.x?alertid=49001", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2107", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2109", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2106", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2105", }, { trust: 0.1, url: "https://security.gentoo.org/", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2183", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2107", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2178", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2176", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-7052", }, { trust: 0.1, url: "http://creativecommons.org/licenses/by-sa/2.5", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6304", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6305", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2108", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2106", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2108", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7052", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2105", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2109", }, { trust: 0.1, url: "http://eprint.iacr.org/2016/594.pdf", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2176", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2180", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2177", }, { trust: 0.1, url: "https://bugs.gentoo.org.", }, { trust: 0.1, url: "http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6306", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-6308", }, { trust: 0.1, url: "https://www.openssl.org/policies/secpolicy.html", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-6303", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-6302", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2182", }, { trust: 0.1, url: "https://sweet32.info)", }, { trust: 0.1, url: "https://www.openssl.org/policies/releasestrat.html),", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2179", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-2181", }, { trust: 0.1, url: "https://nvd.nist.gov/vuln/detail/cve-2016-6307", }, ], sources: [ { db: "VULMON", id: "CVE-2016-6305", }, { db: "BID", id: "93149", }, { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "PACKETSTORM", id: "140056", }, { db: "PACKETSTORM", id: "169633", }, { db: "NVD", id: "CVE-2016-6305", }, { db: "CNNVD", id: "CNNVD-201609-594", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "VULMON", id: "CVE-2016-6305", }, { db: "BID", id: "93149", }, { db: "JVNDB", id: "JVNDB-2016-004991", }, { db: "PACKETSTORM", id: "140056", }, { db: "PACKETSTORM", id: "169633", }, { db: "NVD", id: "CVE-2016-6305", }, { db: "CNNVD", id: "CNNVD-201609-594", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2016-09-26T00:00:00", db: "VULMON", id: "CVE-2016-6305", }, { date: "2016-09-22T00:00:00", db: "BID", id: "93149", }, { date: "2016-09-30T00:00:00", db: "JVNDB", id: "JVNDB-2016-004991", }, { date: "2016-12-07T16:37:31", db: "PACKETSTORM", id: "140056", }, { date: "2016-09-22T12:12:12", db: "PACKETSTORM", id: "169633", }, { date: "2016-09-26T19:59:01.597000", db: "NVD", id: "CVE-2016-6305", }, { date: "2016-09-27T00:00:00", db: "CNNVD", id: "CNNVD-201609-594", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2023-11-07T00:00:00", db: "VULMON", id: "CVE-2016-6305", }, { date: "2017-05-02T01:06:00", db: "BID", id: "93149", }, { date: "2017-10-03T00:00:00", db: "JVNDB", id: "JVNDB-2016-004991", }, { date: "2023-11-07T02:33:57.163000", db: "NVD", id: "CVE-2016-6305", }, { date: "2022-12-14T00:00:00", db: "CNNVD", id: "CNNVD-201609-594", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "CNNVD", id: "CNNVD-201609-594", }, ], trust: 0.6, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "OpenSSL of record/rec_layer_s3.c of ssl3_read_bytes Service disruption in functions (DoS) Vulnerabilities", sources: [ { db: "JVNDB", id: "JVNDB-2016-004991", }, ], trust: 0.8, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "input validation error", sources: [ { db: "CNNVD", id: "CNNVD-201609-594", }, ], trust: 0.6, }, }
wid-sec-w-2024-1277
Vulnerability from csaf_certbund
Published
2017-04-18 22:00
Modified
2024-11-11 23:00
Summary
Oracle Fusion Middleware: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Oracle Fusion Middleware bündelt mehrere Produkte zur Erstellung, Betrieb und Management von intelligenten Business Anwendungen.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme
- Linux
- UNIX
- Windows
{ document: { aggregate_severity: { text: "kritisch", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "Oracle Fusion Middleware bündelt mehrere Produkte zur Erstellung, Betrieb und Management von intelligenten Business Anwendungen.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.", title: "Angriff", }, { category: "general", text: "- Linux\n- UNIX\n- Windows", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2024-1277 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2024-1277.json", }, { category: "self", summary: "WID-SEC-2024-1277 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1277", }, { category: "external", summary: "Oracle Critical Patch Update Advisory - April 2017 - Oracle Fusion Middleware vom 2017-04-18", url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html#AppendixFMW", }, { category: "external", summary: "CISA Known Exploited Vulnerabilities Catalog vom 2024-06-03", url: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", }, ], source_lang: "en-US", title: "Oracle Fusion Middleware: Mehrere Schwachstellen", tracking: { current_release_date: "2024-11-11T23:00:00.000+00:00", generator: { date: "2024-11-12T10:06:32.931+00:00", engine: { name: "BSI-WID", version: "1.3.8", }, }, id: "WID-SEC-W-2024-1277", initial_release_date: "2017-04-18T22:00:00.000+00:00", revision_history: [ { date: "2017-04-18T22:00:00.000+00:00", number: "1", summary: "Initial Release", }, { date: "2017-04-18T22:00:00.000+00:00", number: "2", summary: "n", }, { date: "2017-04-18T22:00:00.000+00:00", number: "3", summary: "Version nicht vorhanden", }, { date: "2024-06-03T22:00:00.000+00:00", number: "4", summary: "Aktive Ausnutzung gemeldet", }, { date: "2024-11-11T23:00:00.000+00:00", number: "5", summary: "Korrektur", }, ], status: "final", version: "5", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Oracle Fusion Middleware", product: { name: "Oracle Fusion Middleware", product_id: "T006198", product_identification_helper: { cpe: "cpe:/a:oracle:fusion_middleware:-", }, }, }, { category: "product_name", name: "Oracle WebCenter Sites", product: { name: "Oracle WebCenter Sites", product_id: "T009734", product_identification_helper: { cpe: "cpe:/a:oracle:webcenter_sites:-", }, }, }, ], category: "vendor", name: "Oracle", }, ], }, vulnerabilities: [ { cve: "CVE-2012-1007", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2012-1007", }, { cve: "CVE-2014-0114", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2014-0114", }, { cve: "CVE-2015-5351", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2015-5351", }, { cve: "CVE-2015-7501", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2015-7501", }, { cve: "CVE-2016-0706", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-0706", }, { cve: "CVE-2016-0714", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-0714", }, { cve: "CVE-2016-0763", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-0763", }, { cve: "CVE-2016-1181", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-1181", }, { cve: "CVE-2016-1182", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-1182", }, { cve: "CVE-2016-2177", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-2177", }, { cve: "CVE-2016-2178", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-2178", }, { cve: "CVE-2016-2179", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-2179", }, { cve: "CVE-2016-2180", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-2180", }, { cve: "CVE-2016-2181", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-2181", }, { cve: "CVE-2016-2182", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-2182", }, { cve: "CVE-2016-2183", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-2183", }, { cve: "CVE-2016-6302", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6302", }, { cve: "CVE-2016-6303", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6303", }, { cve: "CVE-2016-6304", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6304", }, { cve: "CVE-2016-6305", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6305", }, { cve: "CVE-2016-6306", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6306", }, { cve: "CVE-2016-6307", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6307", }, { cve: "CVE-2016-6308", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6308", }, { cve: "CVE-2016-6309", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-6309", }, { cve: "CVE-2016-7052", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2016-7052", }, { cve: "CVE-2017-3230", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3230", }, { cve: "CVE-2017-3499", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3499", }, { cve: "CVE-2017-3506", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3506", }, { cve: "CVE-2017-3507", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3507", }, { cve: "CVE-2017-3531", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3531", }, { cve: "CVE-2017-3540", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3540", }, { cve: "CVE-2017-3541", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3541", }, { cve: "CVE-2017-3542", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3542", }, { cve: "CVE-2017-3543", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3543", }, { cve: "CVE-2017-3545", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3545", }, { cve: "CVE-2017-3553", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3553", }, { cve: "CVE-2017-3554", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3554", }, { cve: "CVE-2017-3591", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3591", }, { cve: "CVE-2017-3593", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3593", }, { cve: "CVE-2017-3594", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3594", }, { cve: "CVE-2017-3595", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3595", }, { cve: "CVE-2017-3596", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3596", }, { cve: "CVE-2017-3597", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3597", }, { cve: "CVE-2017-3598", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3598", }, { cve: "CVE-2017-3601", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3601", }, { cve: "CVE-2017-3602", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3602", }, { cve: "CVE-2017-3603", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3603", }, { cve: "CVE-2017-3625", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3625", }, { cve: "CVE-2017-3626", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-3626", }, { cve: "CVE-2017-5638", notes: [ { category: "description", text: "In Oracle Fusion Middleware existieren mehrere nicht näher beschriebene Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein Angreifer die Vertraulichkeit, Integrität und Verfügbarkeit gefährden. Für die Ausnutzung einiger dieser Schwachstellen ist keine Authentifizierung notwendig. Oracle veröffentlicht keine weiteren Details zu diesen Schwachstellen (außer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadenshöhe ausschließlich auf Basis der CVSS Impact Matrix. Der Maximalwert für diese Produkte ist \"High\" für \"Integrity\", \"Confidentiality\" und \"Availability\" und bewirkt damit eine \"hohe\" Schadenshöhe.", }, ], product_status: { known_affected: [ "T009734", "T006198", ], }, release_date: "2017-04-18T22:00:00.000+00:00", title: "CVE-2017-5638", }, ], }
WID-SEC-W-2024-0209
Vulnerability from csaf_certbund
Published
2016-09-22 22:00
Modified
2025-01-08 23:00
Summary
OpenSSL: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.
Betroffene Betriebssysteme
- Appliance
- CISCO Appliance
- F5 Networks
- Juniper Appliance
- Linux
- UNIX
- Windows
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.", title: "Angriff", }, { category: "general", text: "- Appliance\n- CISCO Appliance\n- F5 Networks\n- Juniper Appliance\n- Linux\n- UNIX\n- Windows", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2024-0209 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2024-0209.json", }, { category: "self", summary: "WID-SEC-2024-0209 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0209", }, { category: "external", summary: "OpenSSL Security Advisory vom 2016-09-22", url: "https://www.openssl.org/news/secadv/20160922.txt", }, { category: "external", summary: "FreeBSD Security Advisory FREEBSD-SA-16:26.OPENSSL vom 2016-09-23", url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc", }, { category: "external", summary: "Ubuntu Security Notice USN-3087-2 vom 2016-09-23", url: "http://www.ubuntu.com/usn/usn-3087-2/", }, { category: "external", summary: "SUSE Security Update Announcement ID SUSE-SU-2016:2387-1", url: "https://www.suse.com/de-de/support/update/announcement/2016/suse-su-20162387-1.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27", url: "https://access.redhat.com/errata/RHSA-2016:1940", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2394-1 vom 2016-09-27", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1.html", }, { category: "external", summary: "CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-09-27", url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2458-1 vom 2016-10-05", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1.html", }, { category: "external", summary: "Arista Security Advisory 0024 vom 2016-10-05", url: "http://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24", }, { category: "external", summary: "F5 Security Advisory sol13167034 vom 2016-10-05", url: "https://support.f5.com/kb/en-us/solutions/public/k/13/sol13167034.html?ref=rss", }, { category: "external", summary: "Blue Coat Security Advisory sa13 vom 2016-10-06", url: "https://kb.bluecoat.com/security-advisory/sa132", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2468-1 vom 2016-10-07", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2469-1 vom 2016-10-07", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162469-1.html", }, { category: "external", summary: "Juniper Security Bulletin JSA10759 vom 2016-10-14", url: "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759&cat=SIRT_1&actp=LIST", }, { category: "external", summary: "Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19", url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1", }, { category: "external", summary: "F5 Security Advisory sol90492697 vom 2016-10-24", url: "https://support.f5.com/kb/en-us/solutions/public/k/90/sol90492697.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2545-1 vom 2016-10-25", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162545-1.html", }, { category: "external", summary: "Tenable Advisory ID TNS-2016-16 vom 2016-10-25", url: "http://www.tenable.com/security/tns-2016-16", }, { category: "external", summary: "F5 Security Advisory sol59298921 vom 2016-10-30", url: "https://support.f5.com/kb/en-us/solutions/public/k/59/sol59298921.html?ref=rss", }, { category: "external", summary: "F5 Security Advisory SOL23512141 vom 2016-11-01", url: "https://support.f5.com/kb/en-us/solutions/public/k/23/sol23512141.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2470-2 vom 2016-11-01", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162470-2.html", }, { category: "external", summary: "HPE SECURITY BULLETIN c05323116 vom 2016-11-01", url: "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05323116", }, { category: "external", summary: "F5 Security Advisory SOL01276005 vom 2016-11-04", url: "https://support.f5.com/kb/en-us/solutions/public/k/01/sol01276005.html", }, { category: "external", summary: "F5 Security Advisory SOL02652550 vom 2016-11-14", url: "https://support.f5.com/kb/en-us/solutions/public/k/02/sol02652550.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2016:2802 vom 2016-11-18", url: "https://access.redhat.com/errata/RHSA-2016:2802", }, { category: "external", summary: "BLUECOAT Security Advisory SA135 vom 2016-12-01", url: "https://bto.bluecoat.com/security-advisory/sa135", }, { category: "external", summary: "Xerox Mini Bulletin XRX16AF vom 2016-12-04", url: "https://www.xerox.com/download/security/security-bulletin/1cf9a-54159c674d1b0/cert_Security_Mini-_Bulletin_XRX16AF_for_PH3635_v1-0.pdf", }, { category: "external", summary: "RedHat Security Advisory RHSA-2016-2957", url: "https://rhn.redhat.com/errata/RHSA-2016-2957.html", }, { category: "external", summary: "BLUECOAT Security Advisory SA137 vom 2016-12-20", url: "https://bto.bluecoat.com/security-advisory/sa137", }, { category: "external", summary: "BLUECOAT Security Advisory SA133 vom 2016-12-23", url: "https://bto.bluecoat.com/security-advisory/sa133", }, { category: "external", summary: "Juniper Security Advisory JSA10774 vom 2017-01-12", url: "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774", }, { category: "external", summary: "Juniper Security Advisory JSA10770 vom 2017-01-12", url: "http://www.auscert.org.au/render.html?it=42842", }, { category: "external", summary: "HP Security Bulletin c05369403", url: "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05369403", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:0193 vom 2017-01-26", url: "https://access.redhat.com/errata/RHSA-2017:0193", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:0194 vom 2017-01-26", url: "https://access.redhat.com/errata/RHSA-2017:0194", }, { category: "external", summary: "Ubuntu Security Notice USN-3181-1 vom 2017-01-31", url: "http://www.ubuntu.com/usn/usn-3181-1/", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0460-1 vom 2017-02-14", url: "https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:0462 vom 2017-03-08", url: "https://access.redhat.com/errata/RHSA-2017:0462", }, { category: "external", summary: "Xerox Security Bulletin XRX17-006 vom 2017-03-08", url: "https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf", }, { category: "external", summary: "Xerox Security Bulletin XRX17-005 vom 2017-03-08", url: "https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0719-1 vom 2017-03-17", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170719-1.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0716-1 vom 2017-03-17", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170716-1.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0726-1 vom 2017-03-17", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170726-1.html", }, { category: "external", summary: "Fortinet Security Advisory FG-IR-16-048 vom 2017-04-06", url: "http://fortiguard.com/psirt/FG-IR-16-048", }, { category: "external", summary: "NetApp Advisory Number NTAP-20160928-0001 vom 2017-04-06", url: "https://kb.netapp.com/support/s/article/ka51A00000007QeQAI/NTAP-20160928-0001?language=en_US", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1414 vom 2017-06-07", url: "https://access.redhat.com/errata/RHSA-2017:1414", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1413 vom 2017-06-07", url: "https://access.redhat.com/errata/RHSA-2017:1413", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1415 vom 2017-06-08", url: "https://rhn.redhat.com/errata/RHSA-2017-1415.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1658 vom 2017-06-29", url: "https://access.redhat.com/errata/RHSA-2017:1658", }, { category: "external", summary: "HPE SECURITY BULLETIN hpesbgn03765en_us vom 2017-08-31", url: "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03765en_us", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:2710 vom 2017-09-13", url: "https://access.redhat.com/errata/RHSA-2017:2710", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:2709 vom 2017-09-13", url: "https://access.redhat.com/errata/RHSA-2017:2709", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:2708 vom 2017-09-13", url: "https://access.redhat.com/errata/RHSA-2017:2708", }, { category: "external", summary: "Xerox Mini Bulletin XRX17AD vom 2017-09-28", url: "https://security.business.xerox.com/wp-content/uploads/2017/09/cert_Security_Mini-_Bulletin_XRX17AD_for_PH3635_v1.0.pdf", }, { category: "external", summary: "Xerox Mini Bulletin XRX17AE vom 2017-09-28", url: "https://security.business.xerox.com/wp-content/uploads/2017/09/cert_Security_Mini-_Bulletin_XRX17AE_for_WC3325_v1.0.pdf", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:3114 vom 2017-11-02", url: "https://access.redhat.com/errata/RHSA-2017:3114", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:3113 vom 2017-11-02", url: "https://access.redhat.com/errata/RHSA-2017:3113", }, { category: "external", summary: "F5 Security Advisory K53084033 vom 2017-11-06", url: "https://support.f5.com/csp/article/K53084033", }, { category: "external", summary: "McAfee Security Bulletin:SB10215", url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10215", }, { category: "external", summary: "NetApp Security Advisory NTAP-20160915-0001 vom 2018-01-30", url: "https://security.netapp.com/advisory/ntap-20160915-0001/", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2018:2123 vom 2018-07-03", url: "http://rhn.redhat.com/errata/RHSA-2018-2123.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13", url: "https://access.redhat.com/errata/RHSA-2018:2185", }, { category: "external", summary: "CentOS Security Advisory CESA-2018:2123 vom 2018-07-13", url: "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-2123-Moderate-CentOS-7-python-Security-Update-tp4645172.html", }, { category: "external", summary: "NetApp Security Advisory NTAP-20170119-0001 vom 2019-02-07", url: "https://security.netapp.com/advisory/ntap-20170119-0001/", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13", url: "http://linux.oracle.com/errata/ELSA-2019-4581.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2019:1245 vom 2019-05-20", url: "https://access.redhat.com/errata/RHSA-2019:1245", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16", url: "http://linux.oracle.com/errata/ELSA-2019-4747.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2019:2859 vom 2019-09-27", url: "https://access.redhat.com/errata/RHSA-2019:2859", }, { category: "external", summary: "EMC Security Advisory 542344 vom 2020-03-31", url: "https://www.dell.com/support/security/de-de/details/542344/DSA-2020-072-Dell-EMC-VNX2-Family-Security-Update-for-Multiple-Third-Party-Component-Vulnerabilit", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01", url: "https://linux.oracle.com/errata/ELSA-2021-9150.html", }, { category: "external", summary: "F5 Security Advisory K90492697 vom 2021-05-18", url: "https://support.f5.com/csp/article/K90492697", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08", url: "https://linux.oracle.com/errata/ELSA-2022-9272.html", }, { category: "external", summary: "Dell Knowledge Base Article", url: "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities", }, { category: "external", summary: "IBM Security Bulletin 7173018 vom 2024-10-14", url: "https://www.ibm.com/support/pages/node/7173018", }, { category: "external", summary: "Juniper Security Advisory JSA92874 vom 2024-01-09", url: "https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release", }, ], source_lang: "en-US", title: "OpenSSL: Mehrere Schwachstellen", tracking: { current_release_date: "2025-01-08T23:00:00.000+00:00", generator: { date: "2025-01-09T09:21:21.473+00:00", engine: { name: "BSI-WID", version: "1.3.10", }, }, id: "WID-SEC-W-2024-0209", initial_release_date: "2016-09-22T22:00:00.000+00:00", revision_history: [ { date: "2016-09-22T22:00:00.000+00:00", number: "1", summary: "Initial Release", }, { date: "2016-09-22T22:00:00.000+00:00", number: "2", summary: "Version nicht vorhanden", }, { date: "2016-09-25T22:00:00.000+00:00", number: "3", summary: "New remediations available", }, { date: "2016-09-25T22:00:00.000+00:00", number: "4", summary: "Version nicht vorhanden", }, { date: "2016-09-26T22:00:00.000+00:00", number: "5", summary: "New remediations available", }, { date: "2016-09-26T22:00:00.000+00:00", number: "6", summary: "Version nicht vorhanden", }, { date: "2016-09-27T22:00:00.000+00:00", number: "7", summary: "New remediations available", }, { date: "2016-09-27T22:00:00.000+00:00", number: "8", summary: "New remediations available", }, { date: "2016-10-05T22:00:00.000+00:00", number: "9", summary: "New remediations available", }, { date: "2016-10-05T22:00:00.000+00:00", number: "10", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "11", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "12", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "13", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "14", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "15", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "16", summary: "Version nicht vorhanden", }, { date: "2016-10-06T22:00:00.000+00:00", number: "17", summary: "New remediations available", }, { date: "2016-10-06T22:00:00.000+00:00", number: "18", summary: "New remediations available", }, { date: "2016-10-06T22:00:00.000+00:00", number: "19", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "20", summary: "New remediations available", }, { date: "2016-10-16T22:00:00.000+00:00", number: "21", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "22", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "23", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "24", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "25", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "26", summary: "Version nicht vorhanden", }, { date: "2016-10-24T22:00:00.000+00:00", number: "27", summary: "New remediations available", }, { date: "2016-10-25T22:00:00.000+00:00", number: "28", summary: "New remediations available", }, { date: "2016-10-25T22:00:00.000+00:00", number: "29", summary: "New remediations available", }, { date: "2016-10-25T22:00:00.000+00:00", number: "30", summary: "Version nicht vorhanden", }, { date: "2016-10-25T22:00:00.000+00:00", number: "31", summary: "Version nicht vorhanden", }, { date: "2016-10-31T23:00:00.000+00:00", number: "32", summary: "New remediations available", }, { date: "2016-11-01T23:00:00.000+00:00", number: "33", summary: "New remediations available", }, { date: "2016-11-01T23:00:00.000+00:00", number: "34", summary: "New remediations available", }, { date: "2016-11-01T23:00:00.000+00:00", number: "35", summary: "Version nicht vorhanden", }, { date: "2016-11-01T23:00:00.000+00:00", number: "36", summary: "Version nicht vorhanden", }, { date: "2016-11-06T23:00:00.000+00:00", number: "37", summary: "New remediations available", }, { date: "2016-11-06T23:00:00.000+00:00", number: "38", summary: "Version nicht vorhanden", }, { date: "2016-11-14T23:00:00.000+00:00", number: "39", summary: "New remediations available", }, { date: "2016-11-17T23:00:00.000+00:00", number: "40", summary: "New remediations available", }, { date: "2016-11-17T23:00:00.000+00:00", number: "41", summary: "Version nicht vorhanden", }, { date: "2016-11-17T23:00:00.000+00:00", number: "42", summary: "Version nicht vorhanden", }, { date: "2016-11-30T23:00:00.000+00:00", number: "43", summary: "New remediations available", }, { date: "2016-11-30T23:00:00.000+00:00", number: "44", summary: "Version nicht vorhanden", }, { date: "2016-11-30T23:00:00.000+00:00", number: "45", summary: "Version nicht vorhanden", }, { date: "2016-12-18T23:00:00.000+00:00", number: "46", summary: "New remediations available", }, { date: "2016-12-20T23:00:00.000+00:00", number: "47", summary: "New remediations available", }, { date: "2016-12-22T23:00:00.000+00:00", number: "48", summary: "New remediations available", }, { date: "2017-01-11T23:00:00.000+00:00", number: "49", summary: "New remediations available", }, { date: "2017-01-12T23:00:00.000+00:00", number: "50", summary: "New remediations available", }, { date: "2017-01-12T23:00:00.000+00:00", number: "51", summary: "Version nicht vorhanden", }, { date: "2017-01-25T23:00:00.000+00:00", number: "52", summary: "New remediations available", }, { date: "2017-01-31T23:00:00.000+00:00", number: "53", summary: "New remediations available", }, { date: "2017-02-14T23:00:00.000+00:00", number: "54", summary: "New remediations available", }, { date: "2017-03-08T23:00:00.000+00:00", number: "55", summary: "New remediations available", }, { date: "2017-03-08T23:00:00.000+00:00", number: "56", summary: "New remediations available", }, { date: "2017-03-08T23:00:00.000+00:00", number: "57", summary: "Version nicht vorhanden", }, { date: "2017-03-08T23:00:00.000+00:00", number: "58", summary: "New remediations available", }, { date: "2017-03-19T23:00:00.000+00:00", number: "59", summary: "New remediations available", }, { date: "2017-03-19T23:00:00.000+00:00", number: "60", summary: "Version nicht vorhanden", }, { date: "2017-03-19T23:00:00.000+00:00", number: "61", summary: "Version nicht vorhanden", }, { date: "2017-06-07T22:00:00.000+00:00", number: "62", summary: "New remediations available", }, { date: "2017-06-07T22:00:00.000+00:00", number: "63", summary: "New remediations available", }, { date: "2017-06-28T22:00:00.000+00:00", number: "64", summary: "New remediations available", }, { date: "2017-07-05T22:00:00.000+00:00", number: "65", summary: "Added references", }, { date: "2017-08-31T22:00:00.000+00:00", number: "66", summary: "Version nicht vorhanden", }, { date: "2017-09-13T22:00:00.000+00:00", number: "67", summary: "New remediations available", }, { date: "2017-09-13T22:00:00.000+00:00", number: "68", summary: "Version nicht vorhanden", }, { date: "2017-11-02T23:00:00.000+00:00", number: "69", summary: "New remediations available", }, { date: "2017-11-05T23:00:00.000+00:00", number: "70", summary: "New remediations available", }, { date: "2017-12-07T23:00:00.000+00:00", number: "71", summary: "New remediations available", }, { date: "2018-01-30T23:00:00.000+00:00", number: "72", summary: "New remediations available", }, { date: "2018-07-03T22:00:00.000+00:00", number: "73", summary: "New remediations available", }, { date: "2018-07-12T22:00:00.000+00:00", number: "74", summary: "New remediations available", }, { date: "2018-07-15T22:00:00.000+00:00", number: "75", summary: "New remediations available", }, { date: "2018-11-05T23:00:00.000+00:00", number: "76", summary: "Added references", }, { date: "2019-02-07T23:00:00.000+00:00", number: "77", summary: "Neue Updates von NetApp aufgenommen", }, { date: "2019-03-13T23:00:00.000+00:00", number: "78", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2019-05-20T22:00:00.000+00:00", number: "79", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2019-08-18T22:00:00.000+00:00", number: "80", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2019-09-26T22:00:00.000+00:00", number: "81", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2020-03-30T22:00:00.000+00:00", number: "82", summary: "Neue Updates von EMC aufgenommen", }, { date: "2021-03-31T22:00:00.000+00:00", number: "83", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2021-05-17T22:00:00.000+00:00", number: "84", summary: "Neue Updates von F5 aufgenommen", }, { date: "2022-04-10T22:00:00.000+00:00", number: "85", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2024-01-25T23:00:00.000+00:00", number: "86", summary: "Neue Updates von Dell aufgenommen", }, { date: "2024-10-13T22:00:00.000+00:00", number: "87", summary: "Neue Updates von IBM aufgenommen", }, { date: "2025-01-08T23:00:00.000+00:00", number: "88", summary: "Neue Updates von Juniper aufgenommen", }, ], status: "final", version: "88", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Arista EOS", product: { name: "Arista EOS", product_id: "T006486", product_identification_helper: { cpe: "cpe:/o:arista:arista_eos:4.15", }, }, }, ], category: "vendor", name: "Arista", }, { branches: [ { branches: [ { category: "product_version", name: "6.1", product: { name: "Blue Coat Director 6.1", product_id: "T006616", product_identification_helper: { cpe: "cpe:/a:bluecoat:director:6.1", }, }, }, ], category: "product_name", name: "Director", }, { branches: [ { category: "product_version", name: "3.5", product: { name: "Blue Coat ProxyAV 3.5", product_id: "T003290", product_identification_helper: { cpe: "cpe:/h:bluecoat:proxyav:3.5", }, }, }, ], category: "product_name", name: "ProxyAV", }, { branches: [ { category: "product_version", name: "6.6", product: { name: "Blue Coat ProxySG 6.6", product_id: "T006617", product_identification_helper: { cpe: "cpe:/h:bluecoat:proxysg:6.6", }, }, }, { category: "product_version", name: "6.5", product: { name: "Blue Coat ProxySG 6.5", product_id: "T006618", product_identification_helper: { cpe: "cpe:/h:bluecoat:proxysg:6.5", }, }, }, ], category: "product_name", name: "ProxySG", }, ], category: "vendor", name: "Blue Coat", }, { branches: [ { category: "product_name", name: "Cisco ACE", product: { name: "Cisco ACE", product_id: "171387", product_identification_helper: { cpe: "cpe:/a:cisco:application_control_engine_software:a1%287%29", }, }, }, { category: "product_name", name: "Cisco Advanced Malware Protection", product: { name: "Cisco Advanced Malware Protection", product_id: "T007044", product_identification_helper: { cpe: "cpe:/h:cisco:advanced_malware_protection:-", }, }, }, { category: "product_name", name: "Cisco AnyConnect Secure Mobility Solution", product: { name: "Cisco AnyConnect Secure Mobility Solution", product_id: "148715", product_identification_helper: { cpe: "cpe:/a:cisco:anyconnect_secure_mobility_client:2.0", }, }, }, { category: "product_name", name: "Cisco Application Networking Manager", product: { name: "Cisco Application Networking Manager", product_id: "T000614", product_identification_helper: { cpe: "cpe:/a:cisco:application_networking_manager:-", }, }, }, { category: "product_name", name: "Cisco Digital Media Manager", product: { name: "Cisco Digital Media Manager", product_id: "201470", product_identification_helper: { cpe: "cpe:/a:cisco:digital_media_manager:-", }, }, }, { category: "product_name", name: "Cisco Email Security Appliance", product: { name: "Cisco Email Security Appliance", product_id: "196900", product_identification_helper: { cpe: "cpe:/h:cisco:email_security_appliance:-", }, }, }, { category: "product_name", name: "Cisco Emergency Responder", product: { name: "Cisco Emergency Responder", product_id: "2040", product_identification_helper: { cpe: "cpe:/a:cisco:emergency_responder:-", }, }, }, { category: "product_name", name: "Cisco IOS", product: { name: "Cisco IOS", product_id: "18557", product_identification_helper: { cpe: "cpe:/o:cisco:ios:10.0", }, }, }, { category: "product_name", name: "Cisco IOS XE", product: { name: "Cisco IOS XE", product_id: "153141", product_identification_helper: { cpe: "cpe:/o:cisco:ios_xe:3.1.0s", }, }, }, { category: "product_name", name: "Cisco IP Phone", product: { name: "Cisco IP Phone", product_id: "2070", product_identification_helper: { cpe: "cpe:/h:cisco:ip_phone:-", }, }, }, { category: "product_name", name: "Cisco Intrusion Prevention System (IPS)", product: { name: "Cisco Intrusion Prevention System (IPS)", product_id: "2056", product_identification_helper: { cpe: "cpe:/h:cisco:intrusion_prevention_system:-", }, }, }, { category: "product_name", name: "Cisco MDS 9000", product: { name: "Cisco MDS 9000", product_id: "T001069", product_identification_helper: { cpe: "cpe:/o:cisco:mds_9000:-", }, }, }, { category: "product_name", name: "Cisco Network Analysis Module", product: { name: "Cisco Network Analysis Module", product_id: "2084", product_identification_helper: { cpe: "cpe:/h:cisco:network_analysis_module:-", }, }, }, { category: "product_name", name: "Cisco Nexus 2000", product: { name: "Cisco Nexus 2000", product_id: "T003851", product_identification_helper: { cpe: "cpe:/h:cisco:nexus:3000", }, }, }, { category: "product_name", name: "Cisco Nexus 1000V", product: { name: "Cisco Nexus 1000V", product_id: "160893", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_1000v:-", }, }, }, { category: "product_name", name: "Cisco Nexus 5000", product: { name: "Cisco Nexus 5000", product_id: "110496", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_5000:-", }, }, }, { category: "product_name", name: "Cisco Nexus 6000", product: { name: "Cisco Nexus 6000", product_id: "T004721", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_6000:-", }, }, }, { category: "product_name", name: "Cisco Nexus 7000", product: { name: "Cisco Nexus 7000", product_id: "110495", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_7000:-", }, }, }, { category: "product_name", name: "Cisco Nexus 9000", product: { name: "Cisco Nexus 9000", product_id: "T004723", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_9000:-", }, }, }, { category: "product_name", name: "Cisco ONS", product: { name: "Cisco ONS", product_id: "T002252", product_identification_helper: { cpe: "cpe:/h:cisco:ons:15454", }, }, }, { category: "product_name", name: "Cisco Packet Tracer", product: { name: "Cisco Packet Tracer", product_id: "131351", product_identification_helper: { cpe: "cpe:/a:cisco:packet_tracer:5.2", }, }, }, { category: "product_name", name: "Cisco Prime Collaboration", product: { name: "Cisco Prime Collaboration", product_id: "190829", product_identification_helper: { cpe: "cpe:/a:cisco:prime_collaboration:-", }, }, }, { category: "product_name", name: "Cisco Prime Infrastructure", product: { name: "Cisco Prime Infrastructure", product_id: "T000756", product_identification_helper: { cpe: "cpe:/a:cisco:prime_infrastructure:-", }, }, }, { category: "product_name", name: "Cisco Secure Access Control Server (ACS)", product: { name: "Cisco Secure Access Control Server (ACS)", product_id: "138491", product_identification_helper: { cpe: "cpe:/a:cisco:secure_access_control_server:2.1%284%29:-:windows", }, }, }, { category: "product_name", name: "Cisco Security Manager (CSM)", product: { name: "Cisco Security Manager (CSM)", product_id: "95918", product_identification_helper: { cpe: "cpe:/a:cisco:security_manager:-", }, }, }, { category: "product_name", name: "Cisco Show and Share", product: { name: "Cisco Show and Share", product_id: "T003254", product_identification_helper: { cpe: "cpe:/a:cisco:show_and_share:-", }, }, }, { category: "product_name", name: "Cisco Small Business 300 Series Managed Switches", product: { name: "Cisco Small Business 300 Series Managed Switches", product_id: "T000752", product_identification_helper: { cpe: "cpe:/h:cisco:small_business_300_series_managed_switches:1.2.7.76", }, }, }, { category: "product_name", name: "Cisco TelePresence", product: { name: "Cisco TelePresence", product_id: "161441", product_identification_helper: { cpe: "cpe:/h:cisco:telepresence_video_communication_server:-::control", }, }, }, { category: "product_name", name: "Cisco Unified Communications Domain Manager (CUCDM)", product: { name: "Cisco Unified Communications Domain Manager (CUCDM)", product_id: "189046", product_identification_helper: { cpe: "cpe:/a:cisco:unified_communications_domain_manager:-", }, }, }, { category: "product_name", name: "Cisco Unified Communications Manager (CUCM)", product: { name: "Cisco Unified Communications Manager (CUCM)", product_id: "2142", product_identification_helper: { cpe: "cpe:/a:cisco:unified_communications_manager:-", }, }, }, { category: "product_name", name: "Cisco Unified Contact Center Enterprise", product: { name: "Cisco Unified Contact Center Enterprise", product_id: "2143", product_identification_helper: { cpe: "cpe:/a:cisco:unified_contact_center_enterprise:-", }, }, }, { category: "product_name", name: "Cisco Unified Contact Center Express (UCCX)", product: { name: "Cisco Unified Contact Center Express (UCCX)", product_id: "T003053", product_identification_helper: { cpe: "cpe:/h:cisco:unified_contact_center_express:-", }, }, }, { category: "product_name", name: "Cisco Unified IP Phone", product: { name: "Cisco Unified IP Phone", product_id: "T001530", product_identification_helper: { cpe: "cpe:/h:cisco:unified_ip_phones:::9900_series", }, }, }, { category: "product_name", name: "Cisco Unified MeetingPlace (MP)", product: { name: "Cisco Unified MeetingPlace (MP)", product_id: "2153", product_identification_helper: { cpe: "cpe:/a:cisco:unified_meetingplace:-", }, }, }, { category: "product_name", name: "Cisco Unity Connection", product: { name: "Cisco Unity Connection", product_id: "161504", product_identification_helper: { cpe: "cpe:/a:cisco:unity_connection:1.1", }, }, }, { category: "product_name", name: "Cisco Unity Express", product: { name: "Cisco Unity Express", product_id: "2002", product_identification_helper: { cpe: "cpe:/h:cisco:unity_express:-", }, }, }, { category: "product_name", name: "Cisco Video Surveillance", product: { name: "Cisco Video Surveillance", product_id: "64489", product_identification_helper: { cpe: "cpe:/a:cisco:video_surveillance_ip_gateway_encoder_decoder:-", }, }, }, { category: "product_name", name: "Cisco WebEx Meeting Center", product: { name: "Cisco WebEx Meeting Center", product_id: "T002323", product_identification_helper: { cpe: "cpe:/a:cisco:webex_meeting_center:-", }, }, }, { category: "product_name", name: "Cisco WebEx Meetings Server", product: { name: "Cisco WebEx Meetings Server", product_id: "T001160", product_identification_helper: { cpe: "cpe:/a:cisco:webex_meetings_server:-", }, }, }, { category: "product_name", name: "Cisco WebEx Node for MCS", product: { name: "Cisco WebEx Node for MCS", product_id: "T001162", product_identification_helper: { cpe: "cpe:/a:cisco:webex_node_for_mcs:-", }, }, }, { category: "product_name", name: "Cisco Wide Area Application Services", product: { name: "Cisco Wide Area Application Services", product_id: "2186", product_identification_helper: { cpe: "cpe:/a:cisco:wide_area_application_services:-", }, }, }, { category: "product_name", name: "Cisco Wireless LAN Controllers", product: { name: "Cisco Wireless LAN Controllers", product_id: "1889", product_identification_helper: { cpe: "cpe:/a:cisco:wireless_lan_controllers:-", }, }, }, ], category: "vendor", name: "Cisco", }, { branches: [ { category: "product_name", name: "Debian Linux Jessie (8.0)", product: { name: "Debian Linux Jessie (8.0)", product_id: "310725", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:8.0", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { branches: [ { category: "product_version_range", name: "<19.10", product: { name: "Dell NetWorker <19.10", product_id: "T032354", }, }, { category: "product_version", name: "19.1", product: { name: "Dell NetWorker 19.10", product_id: "T032354-fixed", product_identification_helper: { cpe: "cpe:/a:dell:networker:19.10", }, }, }, ], category: "product_name", name: "NetWorker", }, ], category: "vendor", name: "Dell", }, { branches: [ { branches: [ { category: "product_version", name: "6.2.0-6.4.0", product: { name: "F5 ARX 6.2.0-6.4.0", product_id: "T001664", product_identification_helper: { cpe: "cpe:/a:f5:arx:-", }, }, }, ], category: "product_name", name: "ARX", }, { category: "product_name", name: "F5 BIG-IP", product: { name: "F5 BIG-IP", product_id: "T001663", product_identification_helper: { cpe: "cpe:/a:f5:big-ip:-", }, }, }, { category: "product_name", name: "F5 FirePass", product: { name: "F5 FirePass", product_id: "T001665", product_identification_helper: { cpe: "cpe:/a:f5:firepass:-", }, }, }, { category: "product_name", name: "F5 WAN Optimization Manager", product: { name: "F5 WAN Optimization Manager", product_id: "T001721", product_identification_helper: { cpe: "cpe:/a:f5:big-ip_wan_optimization_manager:-", }, }, }, { category: "product_name", name: "F5 WebAccelerator", product: { name: "F5 WebAccelerator", product_id: "T001411", product_identification_helper: { cpe: "cpe:/h:f5:big-ip_webaccelerator:10.2.4", }, }, }, ], category: "vendor", name: "F5", }, { branches: [ { category: "product_name", name: "Fortinet FortiOS", product: { name: "Fortinet FortiOS", product_id: "T009615", product_identification_helper: { cpe: "cpe:/o:fortinet:fortios:-", }, }, }, ], category: "vendor", name: "Fortinet", }, { branches: [ { branches: [ { category: "product_version", name: "9", product: { name: "FreeBSD Project FreeBSD OS 9", product_id: "157037", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:9.0", }, }, }, { category: "product_version", name: "9.3", product: { name: "FreeBSD Project FreeBSD OS 9.3", product_id: "T003390", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:9.3", }, }, }, { category: "product_version", name: "10-10.3", product: { name: "FreeBSD Project FreeBSD OS 10-10.3", product_id: "T007633", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:10.3", }, }, }, { category: "product_version", name: "11-11.0", product: { name: "FreeBSD Project FreeBSD OS 11-11.0", product_id: "T008147", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:11", }, }, }, ], category: "product_name", name: "FreeBSD OS", }, ], category: "vendor", name: "FreeBSD Project", }, { branches: [ { branches: [ { category: "product_version", name: "4", product: { name: "HPE Integrated Lights-Out 4", product_id: "205828", product_identification_helper: { cpe: "cpe:/h:hp:integrated_lights-out:4.0", }, }, }, ], category: "product_name", name: "Integrated Lights-Out", }, { category: "product_name", name: "HPE Loadrunner Software", product: { name: "HPE Loadrunner Software", product_id: "72612", product_identification_helper: { cpe: "cpe:/a:hp:loadrunner:-", }, }, }, { category: "product_name", name: "HPE Performance Center", product: { name: "HPE Performance Center", product_id: "T010661", product_identification_helper: { cpe: "cpe:/a:hp:performance_center:-", }, }, }, { category: "product_name", name: "HPE SiteScope", product: { name: "HPE SiteScope", product_id: "T008871", product_identification_helper: { cpe: "cpe:/a:hp:sitescope:-", }, }, }, ], category: "vendor", name: "HPE", }, { branches: [ { branches: [ { category: "product_version_range", name: "<8.0.0.27", product: { name: "IBM Rational Build Forge <8.0.0.27", product_id: "T038286", }, }, { category: "product_version", name: "8.0.0.27", product: { name: "IBM Rational Build Forge 8.0.0.27", product_id: "T038286-fixed", product_identification_helper: { cpe: "cpe:/a:ibm:rational_build_forge:8.0.0.27", }, }, }, ], category: "product_name", name: "Rational Build Forge", }, ], category: "vendor", name: "IBM", }, { branches: [ { category: "product_name", name: "Juniper JUNOS", product: { name: "Juniper JUNOS", product_id: "5930", product_identification_helper: { cpe: "cpe:/o:juniper:junos:-", }, }, }, { branches: [ { category: "product_name", name: "Juniper Junos Space", product: { name: "Juniper Junos Space", product_id: "T003343", product_identification_helper: { cpe: "cpe:/a:juniper:junos_space:-", }, }, }, { category: "product_version_range", name: "<24.1R2", product: { name: "Juniper Junos Space <24.1R2", product_id: "T040074", }, }, { category: "product_version", name: "24.1R2", product: { name: "Juniper Junos Space 24.1R2", product_id: "T040074-fixed", product_identification_helper: { cpe: "cpe:/a:juniper:junos_space:24.1r2", }, }, }, ], category: "product_name", name: "Junos Space", }, { category: "product_name", name: "Juniper ScreenOS", product: { name: "Juniper ScreenOS", product_id: "T008638", product_identification_helper: { cpe: "cpe:/o:juniper:screenos:-", }, }, }, ], category: "vendor", name: "Juniper", }, { branches: [ { category: "product_name", name: "NetApp OnCommand Unified Manager", product: { name: "NetApp OnCommand Unified Manager", product_id: "T009408", product_identification_helper: { cpe: "cpe:/a:netapp:oncommand_unified_manager:-", }, }, }, ], category: "vendor", name: "NetApp", }, { branches: [ { category: "product_name", name: "Open Source CentOS", product: { name: "Open Source CentOS", product_id: "1727", product_identification_helper: { cpe: "cpe:/o:centos:centos:-", }, }, }, { branches: [ { category: "product_version_range", name: "<1.1.0a", product: { name: "Open Source OpenSSL <1.1.0a", product_id: "T008528", }, }, { category: "product_version", name: "1.1.0a", product: { name: "Open Source OpenSSL 1.1.0a", product_id: "T008528-fixed", product_identification_helper: { cpe: "cpe:/a:openssl:openssl:1.1.0a", }, }, }, { category: "product_version_range", name: "<1.0.2i", product: { name: "Open Source OpenSSL <1.0.2i", product_id: "T008529", }, }, { category: "product_version", name: "1.0.2i", product: { name: "Open Source OpenSSL 1.0.2i", product_id: "T008529-fixed", product_identification_helper: { cpe: "cpe:/a:openssl:openssl:1.0.2i", }, }, }, { category: "product_version_range", name: "<1.0.1u", product: { name: "Open Source OpenSSL <1.0.1u", product_id: "T008530", }, }, { category: "product_version", name: "1.0.1u", product: { name: "Open Source OpenSSL 1.0.1u", product_id: "T008530-fixed", product_identification_helper: { cpe: "cpe:/a:openssl:openssl:1.0.1u", }, }, }, ], category: "product_name", name: "OpenSSL", }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "Oracle Linux", product: { name: "Oracle Linux", product_id: "T004914", product_identification_helper: { cpe: "cpe:/o:oracle:linux:-", }, }, }, ], category: "vendor", name: "Oracle", }, { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, ], category: "vendor", name: "Red Hat", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server", product: { name: "SUSE Linux Enterprise Server", product_id: "T008429", product_identification_helper: { cpe: "cpe:/o:suse:linux_enterprise_server:12:ltss", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { branches: [ { category: "product_version", name: "6.8-6.8.2", product: { name: "Tenable Security Nessus 6.8-6.8.2", product_id: "T008769", product_identification_helper: { cpe: "cpe:/a:tenable:nessus:6.8.2", }, }, }, ], category: "product_name", name: "Nessus", }, ], category: "vendor", name: "Tenable Security", }, { branches: [ { branches: [ { category: "product_version", name: "12.04 LTS", product: { name: "Ubuntu Linux 12.04 LTS", product_id: "170497", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", }, }, }, { category: "product_version", name: "14.04 LTS", product: { name: "Ubuntu Linux 14.04 LTS", product_id: "T003005", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:14.04:-:lts", }, }, }, { category: "product_version", name: "16.04 LTS", product: { name: "Ubuntu Linux 16.04 LTS", product_id: "T007521", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:16.04_lts", }, }, }, ], category: "product_name", name: "Linux", }, ], category: "vendor", name: "Ubuntu", }, { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server", product: { name: "Xerox FreeFlow Print Server", product_id: "T000700", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:8", }, }, }, { category: "product_name", name: "Xerox Phaser", product: { name: "Xerox Phaser", product_id: "T004484", product_identification_helper: { cpe: "cpe:/h:xerox:phaser:-", }, }, }, { category: "product_name", name: "Xerox WorkCentre", product: { name: "Xerox WorkCentre", product_id: "T000855", product_identification_helper: { cpe: "cpe:/h:xerox:workcentre:-", }, }, }, ], category: "vendor", name: "Xerox", }, { branches: [ { category: "product_name", name: "Cisco Aironet Access Point", product: { name: "Cisco Aironet Access Point", product_id: "177610", product_identification_helper: { cpe: "cpe:/h:cisco:aironet_3500:-", }, }, }, ], category: "vendor", name: "cisco", }, ], }, vulnerabilities: [ { cve: "CVE-2016-2183", notes: [ { category: "description", text: "Es existiert eine Schwachstelle in OpenSSL im Zusammenhang mit verschlüsselten Sessions, die mit dem Verschlüsselungsalgorithmus Triple-DES (3DES) im Cipher Block Chaining (CBC) Modus chiffriert werden. Diese Schwachstelle beruht darauf, dass 3DES auf einer Blockgröße von 64 Bit basiert und aufgrund des Geburtstagsparadoxons bei größeren Datenmengen deshalb mit hoher Wahrscheinlichkeit Kollisionen im CBC Modus auftreten. In der Folge kann ein Angreifer, welcher sich in einer \"Man-in-the-Middle\" Position befindet und in der Lage ist genügend Datenverkehr mithilfe eines Known Plaintext Angriffs (Angreifer besitzt Geheimtext und den zugehörigen Klartext) zu generieren bzw. mitzulesen, diese Schwachstelle ausnutzen, um einen Kollisionsangriff durchzuführen und verschlüsselte Inhalte offenzulegen. Voraussetzung für einen erfolgreichen Angriff ist, dass bei der Verschlüsselung der CBC Modus verwendet wurde und die mitgelesenen verschlüsselten Daten mit dem gleichen Session Schlüssel chiffriert wurden. Diese Angriffsmethode wird auch \"SWEET32\" genannt.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2183", }, { cve: "CVE-2016-2177", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2177", }, { cve: "CVE-2016-2179", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2179", }, { cve: "CVE-2016-2180", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2180", }, { cve: "CVE-2016-2181", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2181", }, { cve: "CVE-2016-2182", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2182", }, { cve: "CVE-2016-6302", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6302", }, { cve: "CVE-2016-6303", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6303", }, { cve: "CVE-2016-6304", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6304", }, { cve: "CVE-2016-6305", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6305", }, { cve: "CVE-2016-6306", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6306", }, { cve: "CVE-2016-6307", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6307", }, { cve: "CVE-2016-6308", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6308", }, { cve: "CVE-2016-2178", notes: [ { category: "description", text: "Es existiert eine Schwachstelle in OpenSSL. Ein lokaler Angreifer kann einen Fehler im DSA signing Algorithmus ausnutzen um über einen Side Chanel Angriff sensitive Daten des Signatur-Prozesses offenzulegen. So kann z.B. auch der DSA Private Key offengelegt werden.", }, ], product_status: { known_affected: [ "2070", "T001160", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2178", }, ], }
wid-sec-w-2024-0209
Vulnerability from csaf_certbund
Published
2016-09-22 22:00
Modified
2025-01-08 23:00
Summary
OpenSSL: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.
Betroffene Betriebssysteme
- Appliance
- CISCO Appliance
- F5 Networks
- Juniper Appliance
- Linux
- UNIX
- Windows
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.", title: "Angriff", }, { category: "general", text: "- Appliance\n- CISCO Appliance\n- F5 Networks\n- Juniper Appliance\n- Linux\n- UNIX\n- Windows", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2024-0209 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2024-0209.json", }, { category: "self", summary: "WID-SEC-2024-0209 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0209", }, { category: "external", summary: "OpenSSL Security Advisory vom 2016-09-22", url: "https://www.openssl.org/news/secadv/20160922.txt", }, { category: "external", summary: "FreeBSD Security Advisory FREEBSD-SA-16:26.OPENSSL vom 2016-09-23", url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc", }, { category: "external", summary: "Ubuntu Security Notice USN-3087-2 vom 2016-09-23", url: "http://www.ubuntu.com/usn/usn-3087-2/", }, { category: "external", summary: "SUSE Security Update Announcement ID SUSE-SU-2016:2387-1", url: "https://www.suse.com/de-de/support/update/announcement/2016/suse-su-20162387-1.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27", url: "https://access.redhat.com/errata/RHSA-2016:1940", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2394-1 vom 2016-09-27", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1.html", }, { category: "external", summary: "CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-09-27", url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2458-1 vom 2016-10-05", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1.html", }, { category: "external", summary: "Arista Security Advisory 0024 vom 2016-10-05", url: "http://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24", }, { category: "external", summary: "F5 Security Advisory sol13167034 vom 2016-10-05", url: "https://support.f5.com/kb/en-us/solutions/public/k/13/sol13167034.html?ref=rss", }, { category: "external", summary: "Blue Coat Security Advisory sa13 vom 2016-10-06", url: "https://kb.bluecoat.com/security-advisory/sa132", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2468-1 vom 2016-10-07", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2469-1 vom 2016-10-07", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162469-1.html", }, { category: "external", summary: "Juniper Security Bulletin JSA10759 vom 2016-10-14", url: "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759&cat=SIRT_1&actp=LIST", }, { category: "external", summary: "Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19", url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1", }, { category: "external", summary: "F5 Security Advisory sol90492697 vom 2016-10-24", url: "https://support.f5.com/kb/en-us/solutions/public/k/90/sol90492697.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2545-1 vom 2016-10-25", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162545-1.html", }, { category: "external", summary: "Tenable Advisory ID TNS-2016-16 vom 2016-10-25", url: "http://www.tenable.com/security/tns-2016-16", }, { category: "external", summary: "F5 Security Advisory sol59298921 vom 2016-10-30", url: "https://support.f5.com/kb/en-us/solutions/public/k/59/sol59298921.html?ref=rss", }, { category: "external", summary: "F5 Security Advisory SOL23512141 vom 2016-11-01", url: "https://support.f5.com/kb/en-us/solutions/public/k/23/sol23512141.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2016:2470-2 vom 2016-11-01", url: "https://www.suse.com/support/update/announcement/2016/suse-su-20162470-2.html", }, { category: "external", summary: "HPE SECURITY BULLETIN c05323116 vom 2016-11-01", url: "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05323116", }, { category: "external", summary: "F5 Security Advisory SOL01276005 vom 2016-11-04", url: "https://support.f5.com/kb/en-us/solutions/public/k/01/sol01276005.html", }, { category: "external", summary: "F5 Security Advisory SOL02652550 vom 2016-11-14", url: "https://support.f5.com/kb/en-us/solutions/public/k/02/sol02652550.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2016:2802 vom 2016-11-18", url: "https://access.redhat.com/errata/RHSA-2016:2802", }, { category: "external", summary: "BLUECOAT Security Advisory SA135 vom 2016-12-01", url: "https://bto.bluecoat.com/security-advisory/sa135", }, { category: "external", summary: "Xerox Mini Bulletin XRX16AF vom 2016-12-04", url: "https://www.xerox.com/download/security/security-bulletin/1cf9a-54159c674d1b0/cert_Security_Mini-_Bulletin_XRX16AF_for_PH3635_v1-0.pdf", }, { category: "external", summary: "RedHat Security Advisory RHSA-2016-2957", url: "https://rhn.redhat.com/errata/RHSA-2016-2957.html", }, { category: "external", summary: "BLUECOAT Security Advisory SA137 vom 2016-12-20", url: "https://bto.bluecoat.com/security-advisory/sa137", }, { category: "external", summary: "BLUECOAT Security Advisory SA133 vom 2016-12-23", url: "https://bto.bluecoat.com/security-advisory/sa133", }, { category: "external", summary: "Juniper Security Advisory JSA10774 vom 2017-01-12", url: "https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774", }, { category: "external", summary: "Juniper Security Advisory JSA10770 vom 2017-01-12", url: "http://www.auscert.org.au/render.html?it=42842", }, { category: "external", summary: "HP Security Bulletin c05369403", url: "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05369403", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:0193 vom 2017-01-26", url: "https://access.redhat.com/errata/RHSA-2017:0193", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:0194 vom 2017-01-26", url: "https://access.redhat.com/errata/RHSA-2017:0194", }, { category: "external", summary: "Ubuntu Security Notice USN-3181-1 vom 2017-01-31", url: "http://www.ubuntu.com/usn/usn-3181-1/", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0460-1 vom 2017-02-14", url: "https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:0462 vom 2017-03-08", url: "https://access.redhat.com/errata/RHSA-2017:0462", }, { category: "external", summary: "Xerox Security Bulletin XRX17-006 vom 2017-03-08", url: "https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf", }, { category: "external", summary: "Xerox Security Bulletin XRX17-005 vom 2017-03-08", url: "https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0719-1 vom 2017-03-17", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170719-1.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0716-1 vom 2017-03-17", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170716-1.html", }, { category: "external", summary: "SUSE Security Update SUSE-SU-2017:0726-1 vom 2017-03-17", url: "https://www.suse.com/support/update/announcement/2017/suse-su-20170726-1.html", }, { category: "external", summary: "Fortinet Security Advisory FG-IR-16-048 vom 2017-04-06", url: "http://fortiguard.com/psirt/FG-IR-16-048", }, { category: "external", summary: "NetApp Advisory Number NTAP-20160928-0001 vom 2017-04-06", url: "https://kb.netapp.com/support/s/article/ka51A00000007QeQAI/NTAP-20160928-0001?language=en_US", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1414 vom 2017-06-07", url: "https://access.redhat.com/errata/RHSA-2017:1414", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1413 vom 2017-06-07", url: "https://access.redhat.com/errata/RHSA-2017:1413", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1415 vom 2017-06-08", url: "https://rhn.redhat.com/errata/RHSA-2017-1415.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:1658 vom 2017-06-29", url: "https://access.redhat.com/errata/RHSA-2017:1658", }, { category: "external", summary: "HPE SECURITY BULLETIN hpesbgn03765en_us vom 2017-08-31", url: "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03765en_us", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:2710 vom 2017-09-13", url: "https://access.redhat.com/errata/RHSA-2017:2710", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:2709 vom 2017-09-13", url: "https://access.redhat.com/errata/RHSA-2017:2709", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:2708 vom 2017-09-13", url: "https://access.redhat.com/errata/RHSA-2017:2708", }, { category: "external", summary: "Xerox Mini Bulletin XRX17AD vom 2017-09-28", url: "https://security.business.xerox.com/wp-content/uploads/2017/09/cert_Security_Mini-_Bulletin_XRX17AD_for_PH3635_v1.0.pdf", }, { category: "external", summary: "Xerox Mini Bulletin XRX17AE vom 2017-09-28", url: "https://security.business.xerox.com/wp-content/uploads/2017/09/cert_Security_Mini-_Bulletin_XRX17AE_for_WC3325_v1.0.pdf", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:3114 vom 2017-11-02", url: "https://access.redhat.com/errata/RHSA-2017:3114", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2017:3113 vom 2017-11-02", url: "https://access.redhat.com/errata/RHSA-2017:3113", }, { category: "external", summary: "F5 Security Advisory K53084033 vom 2017-11-06", url: "https://support.f5.com/csp/article/K53084033", }, { category: "external", summary: "McAfee Security Bulletin:SB10215", url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10215", }, { category: "external", summary: "NetApp Security Advisory NTAP-20160915-0001 vom 2018-01-30", url: "https://security.netapp.com/advisory/ntap-20160915-0001/", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2018:2123 vom 2018-07-03", url: "http://rhn.redhat.com/errata/RHSA-2018-2123.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13", url: "https://access.redhat.com/errata/RHSA-2018:2185", }, { category: "external", summary: "CentOS Security Advisory CESA-2018:2123 vom 2018-07-13", url: "http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-2123-Moderate-CentOS-7-python-Security-Update-tp4645172.html", }, { category: "external", summary: "NetApp Security Advisory NTAP-20170119-0001 vom 2019-02-07", url: "https://security.netapp.com/advisory/ntap-20170119-0001/", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13", url: "http://linux.oracle.com/errata/ELSA-2019-4581.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2019:1245 vom 2019-05-20", url: "https://access.redhat.com/errata/RHSA-2019:1245", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16", url: "http://linux.oracle.com/errata/ELSA-2019-4747.html", }, { category: "external", summary: "Red Hat Security Advisory RHSA-2019:2859 vom 2019-09-27", url: "https://access.redhat.com/errata/RHSA-2019:2859", }, { category: "external", summary: "EMC Security Advisory 542344 vom 2020-03-31", url: "https://www.dell.com/support/security/de-de/details/542344/DSA-2020-072-Dell-EMC-VNX2-Family-Security-Update-for-Multiple-Third-Party-Component-Vulnerabilit", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01", url: "https://linux.oracle.com/errata/ELSA-2021-9150.html", }, { category: "external", summary: "F5 Security Advisory K90492697 vom 2021-05-18", url: "https://support.f5.com/csp/article/K90492697", }, { category: "external", summary: "Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08", url: "https://linux.oracle.com/errata/ELSA-2022-9272.html", }, { category: "external", summary: "Dell Knowledge Base Article", url: "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities", }, { category: "external", summary: "IBM Security Bulletin 7173018 vom 2024-10-14", url: "https://www.ibm.com/support/pages/node/7173018", }, { category: "external", summary: "Juniper Security Advisory JSA92874 vom 2024-01-09", url: "https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release", }, ], source_lang: "en-US", title: "OpenSSL: Mehrere Schwachstellen", tracking: { current_release_date: "2025-01-08T23:00:00.000+00:00", generator: { date: "2025-01-09T09:21:21.473+00:00", engine: { name: "BSI-WID", version: "1.3.10", }, }, id: "WID-SEC-W-2024-0209", initial_release_date: "2016-09-22T22:00:00.000+00:00", revision_history: [ { date: "2016-09-22T22:00:00.000+00:00", number: "1", summary: "Initial Release", }, { date: "2016-09-22T22:00:00.000+00:00", number: "2", summary: "Version nicht vorhanden", }, { date: "2016-09-25T22:00:00.000+00:00", number: "3", summary: "New remediations available", }, { date: "2016-09-25T22:00:00.000+00:00", number: "4", summary: "Version nicht vorhanden", }, { date: "2016-09-26T22:00:00.000+00:00", number: "5", summary: "New remediations available", }, { date: "2016-09-26T22:00:00.000+00:00", number: "6", summary: "Version nicht vorhanden", }, { date: "2016-09-27T22:00:00.000+00:00", number: "7", summary: "New remediations available", }, { date: "2016-09-27T22:00:00.000+00:00", number: "8", summary: "New remediations available", }, { date: "2016-10-05T22:00:00.000+00:00", number: "9", summary: "New remediations available", }, { date: "2016-10-05T22:00:00.000+00:00", number: "10", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "11", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "12", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "13", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "14", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "15", summary: "Version nicht vorhanden", }, { date: "2016-10-05T22:00:00.000+00:00", number: "16", summary: "Version nicht vorhanden", }, { date: "2016-10-06T22:00:00.000+00:00", number: "17", summary: "New remediations available", }, { date: "2016-10-06T22:00:00.000+00:00", number: "18", summary: "New remediations available", }, { date: "2016-10-06T22:00:00.000+00:00", number: "19", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "20", summary: "New remediations available", }, { date: "2016-10-16T22:00:00.000+00:00", number: "21", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "22", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "23", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "24", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "25", summary: "Version nicht vorhanden", }, { date: "2016-10-16T22:00:00.000+00:00", number: "26", summary: "Version nicht vorhanden", }, { date: "2016-10-24T22:00:00.000+00:00", number: "27", summary: "New remediations available", }, { date: "2016-10-25T22:00:00.000+00:00", number: "28", summary: "New remediations available", }, { date: "2016-10-25T22:00:00.000+00:00", number: "29", summary: "New remediations available", }, { date: "2016-10-25T22:00:00.000+00:00", number: "30", summary: "Version nicht vorhanden", }, { date: "2016-10-25T22:00:00.000+00:00", number: "31", summary: "Version nicht vorhanden", }, { date: "2016-10-31T23:00:00.000+00:00", number: "32", summary: "New remediations available", }, { date: "2016-11-01T23:00:00.000+00:00", number: "33", summary: "New remediations available", }, { date: "2016-11-01T23:00:00.000+00:00", number: "34", summary: "New remediations available", }, { date: "2016-11-01T23:00:00.000+00:00", number: "35", summary: "Version nicht vorhanden", }, { date: "2016-11-01T23:00:00.000+00:00", number: "36", summary: "Version nicht vorhanden", }, { date: "2016-11-06T23:00:00.000+00:00", number: "37", summary: "New remediations available", }, { date: "2016-11-06T23:00:00.000+00:00", number: "38", summary: "Version nicht vorhanden", }, { date: "2016-11-14T23:00:00.000+00:00", number: "39", summary: "New remediations available", }, { date: "2016-11-17T23:00:00.000+00:00", number: "40", summary: "New remediations available", }, { date: "2016-11-17T23:00:00.000+00:00", number: "41", summary: "Version nicht vorhanden", }, { date: "2016-11-17T23:00:00.000+00:00", number: "42", summary: "Version nicht vorhanden", }, { date: "2016-11-30T23:00:00.000+00:00", number: "43", summary: "New remediations available", }, { date: "2016-11-30T23:00:00.000+00:00", number: "44", summary: "Version nicht vorhanden", }, { date: "2016-11-30T23:00:00.000+00:00", number: "45", summary: "Version nicht vorhanden", }, { date: "2016-12-18T23:00:00.000+00:00", number: "46", summary: "New remediations available", }, { date: "2016-12-20T23:00:00.000+00:00", number: "47", summary: "New remediations available", }, { date: "2016-12-22T23:00:00.000+00:00", number: "48", summary: "New remediations available", }, { date: "2017-01-11T23:00:00.000+00:00", number: "49", summary: "New remediations available", }, { date: "2017-01-12T23:00:00.000+00:00", number: "50", summary: "New remediations available", }, { date: "2017-01-12T23:00:00.000+00:00", number: "51", summary: "Version nicht vorhanden", }, { date: "2017-01-25T23:00:00.000+00:00", number: "52", summary: "New remediations available", }, { date: "2017-01-31T23:00:00.000+00:00", number: "53", summary: "New remediations available", }, { date: "2017-02-14T23:00:00.000+00:00", number: "54", summary: "New remediations available", }, { date: "2017-03-08T23:00:00.000+00:00", number: "55", summary: "New remediations available", }, { date: "2017-03-08T23:00:00.000+00:00", number: "56", summary: "New remediations available", }, { date: "2017-03-08T23:00:00.000+00:00", number: "57", summary: "Version nicht vorhanden", }, { date: "2017-03-08T23:00:00.000+00:00", number: "58", summary: "New remediations available", }, { date: "2017-03-19T23:00:00.000+00:00", number: "59", summary: "New remediations available", }, { date: "2017-03-19T23:00:00.000+00:00", number: "60", summary: "Version nicht vorhanden", }, { date: "2017-03-19T23:00:00.000+00:00", number: "61", summary: "Version nicht vorhanden", }, { date: "2017-06-07T22:00:00.000+00:00", number: "62", summary: "New remediations available", }, { date: "2017-06-07T22:00:00.000+00:00", number: "63", summary: "New remediations available", }, { date: "2017-06-28T22:00:00.000+00:00", number: "64", summary: "New remediations available", }, { date: "2017-07-05T22:00:00.000+00:00", number: "65", summary: "Added references", }, { date: "2017-08-31T22:00:00.000+00:00", number: "66", summary: "Version nicht vorhanden", }, { date: "2017-09-13T22:00:00.000+00:00", number: "67", summary: "New remediations available", }, { date: "2017-09-13T22:00:00.000+00:00", number: "68", summary: "Version nicht vorhanden", }, { date: "2017-11-02T23:00:00.000+00:00", number: "69", summary: "New remediations available", }, { date: "2017-11-05T23:00:00.000+00:00", number: "70", summary: "New remediations available", }, { date: "2017-12-07T23:00:00.000+00:00", number: "71", summary: "New remediations available", }, { date: "2018-01-30T23:00:00.000+00:00", number: "72", summary: "New remediations available", }, { date: "2018-07-03T22:00:00.000+00:00", number: "73", summary: "New remediations available", }, { date: "2018-07-12T22:00:00.000+00:00", number: "74", summary: "New remediations available", }, { date: "2018-07-15T22:00:00.000+00:00", number: "75", summary: "New remediations available", }, { date: "2018-11-05T23:00:00.000+00:00", number: "76", summary: "Added references", }, { date: "2019-02-07T23:00:00.000+00:00", number: "77", summary: "Neue Updates von NetApp aufgenommen", }, { date: "2019-03-13T23:00:00.000+00:00", number: "78", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2019-05-20T22:00:00.000+00:00", number: "79", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2019-08-18T22:00:00.000+00:00", number: "80", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2019-09-26T22:00:00.000+00:00", number: "81", summary: "Neue Updates von Red Hat aufgenommen", }, { date: "2020-03-30T22:00:00.000+00:00", number: "82", summary: "Neue Updates von EMC aufgenommen", }, { date: "2021-03-31T22:00:00.000+00:00", number: "83", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2021-05-17T22:00:00.000+00:00", number: "84", summary: "Neue Updates von F5 aufgenommen", }, { date: "2022-04-10T22:00:00.000+00:00", number: "85", summary: "Neue Updates von Oracle Linux aufgenommen", }, { date: "2024-01-25T23:00:00.000+00:00", number: "86", summary: "Neue Updates von Dell aufgenommen", }, { date: "2024-10-13T22:00:00.000+00:00", number: "87", summary: "Neue Updates von IBM aufgenommen", }, { date: "2025-01-08T23:00:00.000+00:00", number: "88", summary: "Neue Updates von Juniper aufgenommen", }, ], status: "final", version: "88", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Arista EOS", product: { name: "Arista EOS", product_id: "T006486", product_identification_helper: { cpe: "cpe:/o:arista:arista_eos:4.15", }, }, }, ], category: "vendor", name: "Arista", }, { branches: [ { branches: [ { category: "product_version", name: "6.1", product: { name: "Blue Coat Director 6.1", product_id: "T006616", product_identification_helper: { cpe: "cpe:/a:bluecoat:director:6.1", }, }, }, ], category: "product_name", name: "Director", }, { branches: [ { category: "product_version", name: "3.5", product: { name: "Blue Coat ProxyAV 3.5", product_id: "T003290", product_identification_helper: { cpe: "cpe:/h:bluecoat:proxyav:3.5", }, }, }, ], category: "product_name", name: "ProxyAV", }, { branches: [ { category: "product_version", name: "6.6", product: { name: "Blue Coat ProxySG 6.6", product_id: "T006617", product_identification_helper: { cpe: "cpe:/h:bluecoat:proxysg:6.6", }, }, }, { category: "product_version", name: "6.5", product: { name: "Blue Coat ProxySG 6.5", product_id: "T006618", product_identification_helper: { cpe: "cpe:/h:bluecoat:proxysg:6.5", }, }, }, ], category: "product_name", name: "ProxySG", }, ], category: "vendor", name: "Blue Coat", }, { branches: [ { category: "product_name", name: "Cisco ACE", product: { name: "Cisco ACE", product_id: "171387", product_identification_helper: { cpe: "cpe:/a:cisco:application_control_engine_software:a1%287%29", }, }, }, { category: "product_name", name: "Cisco Advanced Malware Protection", product: { name: "Cisco Advanced Malware Protection", product_id: "T007044", product_identification_helper: { cpe: "cpe:/h:cisco:advanced_malware_protection:-", }, }, }, { category: "product_name", name: "Cisco AnyConnect Secure Mobility Solution", product: { name: "Cisco AnyConnect Secure Mobility Solution", product_id: "148715", product_identification_helper: { cpe: "cpe:/a:cisco:anyconnect_secure_mobility_client:2.0", }, }, }, { category: "product_name", name: "Cisco Application Networking Manager", product: { name: "Cisco Application Networking Manager", product_id: "T000614", product_identification_helper: { cpe: "cpe:/a:cisco:application_networking_manager:-", }, }, }, { category: "product_name", name: "Cisco Digital Media Manager", product: { name: "Cisco Digital Media Manager", product_id: "201470", product_identification_helper: { cpe: "cpe:/a:cisco:digital_media_manager:-", }, }, }, { category: "product_name", name: "Cisco Email Security Appliance", product: { name: "Cisco Email Security Appliance", product_id: "196900", product_identification_helper: { cpe: "cpe:/h:cisco:email_security_appliance:-", }, }, }, { category: "product_name", name: "Cisco Emergency Responder", product: { name: "Cisco Emergency Responder", product_id: "2040", product_identification_helper: { cpe: "cpe:/a:cisco:emergency_responder:-", }, }, }, { category: "product_name", name: "Cisco IOS", product: { name: "Cisco IOS", product_id: "18557", product_identification_helper: { cpe: "cpe:/o:cisco:ios:10.0", }, }, }, { category: "product_name", name: "Cisco IOS XE", product: { name: "Cisco IOS XE", product_id: "153141", product_identification_helper: { cpe: "cpe:/o:cisco:ios_xe:3.1.0s", }, }, }, { category: "product_name", name: "Cisco IP Phone", product: { name: "Cisco IP Phone", product_id: "2070", product_identification_helper: { cpe: "cpe:/h:cisco:ip_phone:-", }, }, }, { category: "product_name", name: "Cisco Intrusion Prevention System (IPS)", product: { name: "Cisco Intrusion Prevention System (IPS)", product_id: "2056", product_identification_helper: { cpe: "cpe:/h:cisco:intrusion_prevention_system:-", }, }, }, { category: "product_name", name: "Cisco MDS 9000", product: { name: "Cisco MDS 9000", product_id: "T001069", product_identification_helper: { cpe: "cpe:/o:cisco:mds_9000:-", }, }, }, { category: "product_name", name: "Cisco Network Analysis Module", product: { name: "Cisco Network Analysis Module", product_id: "2084", product_identification_helper: { cpe: "cpe:/h:cisco:network_analysis_module:-", }, }, }, { category: "product_name", name: "Cisco Nexus 2000", product: { name: "Cisco Nexus 2000", product_id: "T003851", product_identification_helper: { cpe: "cpe:/h:cisco:nexus:3000", }, }, }, { category: "product_name", name: "Cisco Nexus 1000V", product: { name: "Cisco Nexus 1000V", product_id: "160893", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_1000v:-", }, }, }, { category: "product_name", name: "Cisco Nexus 5000", product: { name: "Cisco Nexus 5000", product_id: "110496", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_5000:-", }, }, }, { category: "product_name", name: "Cisco Nexus 6000", product: { name: "Cisco Nexus 6000", product_id: "T004721", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_6000:-", }, }, }, { category: "product_name", name: "Cisco Nexus 7000", product: { name: "Cisco Nexus 7000", product_id: "110495", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_7000:-", }, }, }, { category: "product_name", name: "Cisco Nexus 9000", product: { name: "Cisco Nexus 9000", product_id: "T004723", product_identification_helper: { cpe: "cpe:/h:cisco:nexus_9000:-", }, }, }, { category: "product_name", name: "Cisco ONS", product: { name: "Cisco ONS", product_id: "T002252", product_identification_helper: { cpe: "cpe:/h:cisco:ons:15454", }, }, }, { category: "product_name", name: "Cisco Packet Tracer", product: { name: "Cisco Packet Tracer", product_id: "131351", product_identification_helper: { cpe: "cpe:/a:cisco:packet_tracer:5.2", }, }, }, { category: "product_name", name: "Cisco Prime Collaboration", product: { name: "Cisco Prime Collaboration", product_id: "190829", product_identification_helper: { cpe: "cpe:/a:cisco:prime_collaboration:-", }, }, }, { category: "product_name", name: "Cisco Prime Infrastructure", product: { name: "Cisco Prime Infrastructure", product_id: "T000756", product_identification_helper: { cpe: "cpe:/a:cisco:prime_infrastructure:-", }, }, }, { category: "product_name", name: "Cisco Secure Access Control Server (ACS)", product: { name: "Cisco Secure Access Control Server (ACS)", product_id: "138491", product_identification_helper: { cpe: "cpe:/a:cisco:secure_access_control_server:2.1%284%29:-:windows", }, }, }, { category: "product_name", name: "Cisco Security Manager (CSM)", product: { name: "Cisco Security Manager (CSM)", product_id: "95918", product_identification_helper: { cpe: "cpe:/a:cisco:security_manager:-", }, }, }, { category: "product_name", name: "Cisco Show and Share", product: { name: "Cisco Show and Share", product_id: "T003254", product_identification_helper: { cpe: "cpe:/a:cisco:show_and_share:-", }, }, }, { category: "product_name", name: "Cisco Small Business 300 Series Managed Switches", product: { name: "Cisco Small Business 300 Series Managed Switches", product_id: "T000752", product_identification_helper: { cpe: "cpe:/h:cisco:small_business_300_series_managed_switches:1.2.7.76", }, }, }, { category: "product_name", name: "Cisco TelePresence", product: { name: "Cisco TelePresence", product_id: "161441", product_identification_helper: { cpe: "cpe:/h:cisco:telepresence_video_communication_server:-::control", }, }, }, { category: "product_name", name: "Cisco Unified Communications Domain Manager (CUCDM)", product: { name: "Cisco Unified Communications Domain Manager (CUCDM)", product_id: "189046", product_identification_helper: { cpe: "cpe:/a:cisco:unified_communications_domain_manager:-", }, }, }, { category: "product_name", name: "Cisco Unified Communications Manager (CUCM)", product: { name: "Cisco Unified Communications Manager (CUCM)", product_id: "2142", product_identification_helper: { cpe: "cpe:/a:cisco:unified_communications_manager:-", }, }, }, { category: "product_name", name: "Cisco Unified Contact Center Enterprise", product: { name: "Cisco Unified Contact Center Enterprise", product_id: "2143", product_identification_helper: { cpe: "cpe:/a:cisco:unified_contact_center_enterprise:-", }, }, }, { category: "product_name", name: "Cisco Unified Contact Center Express (UCCX)", product: { name: "Cisco Unified Contact Center Express (UCCX)", product_id: "T003053", product_identification_helper: { cpe: "cpe:/h:cisco:unified_contact_center_express:-", }, }, }, { category: "product_name", name: "Cisco Unified IP Phone", product: { name: "Cisco Unified IP Phone", product_id: "T001530", product_identification_helper: { cpe: "cpe:/h:cisco:unified_ip_phones:::9900_series", }, }, }, { category: "product_name", name: "Cisco Unified MeetingPlace (MP)", product: { name: "Cisco Unified MeetingPlace (MP)", product_id: "2153", product_identification_helper: { cpe: "cpe:/a:cisco:unified_meetingplace:-", }, }, }, { category: "product_name", name: "Cisco Unity Connection", product: { name: "Cisco Unity Connection", product_id: "161504", product_identification_helper: { cpe: "cpe:/a:cisco:unity_connection:1.1", }, }, }, { category: "product_name", name: "Cisco Unity Express", product: { name: "Cisco Unity Express", product_id: "2002", product_identification_helper: { cpe: "cpe:/h:cisco:unity_express:-", }, }, }, { category: "product_name", name: "Cisco Video Surveillance", product: { name: "Cisco Video Surveillance", product_id: "64489", product_identification_helper: { cpe: "cpe:/a:cisco:video_surveillance_ip_gateway_encoder_decoder:-", }, }, }, { category: "product_name", name: "Cisco WebEx Meeting Center", product: { name: "Cisco WebEx Meeting Center", product_id: "T002323", product_identification_helper: { cpe: "cpe:/a:cisco:webex_meeting_center:-", }, }, }, { category: "product_name", name: "Cisco WebEx Meetings Server", product: { name: "Cisco WebEx Meetings Server", product_id: "T001160", product_identification_helper: { cpe: "cpe:/a:cisco:webex_meetings_server:-", }, }, }, { category: "product_name", name: "Cisco WebEx Node for MCS", product: { name: "Cisco WebEx Node for MCS", product_id: "T001162", product_identification_helper: { cpe: "cpe:/a:cisco:webex_node_for_mcs:-", }, }, }, { category: "product_name", name: "Cisco Wide Area Application Services", product: { name: "Cisco Wide Area Application Services", product_id: "2186", product_identification_helper: { cpe: "cpe:/a:cisco:wide_area_application_services:-", }, }, }, { category: "product_name", name: "Cisco Wireless LAN Controllers", product: { name: "Cisco Wireless LAN Controllers", product_id: "1889", product_identification_helper: { cpe: "cpe:/a:cisco:wireless_lan_controllers:-", }, }, }, ], category: "vendor", name: "Cisco", }, { branches: [ { category: "product_name", name: "Debian Linux Jessie (8.0)", product: { name: "Debian Linux Jessie (8.0)", product_id: "310725", product_identification_helper: { cpe: "cpe:/o:debian:debian_linux:8.0", }, }, }, ], category: "vendor", name: "Debian", }, { branches: [ { branches: [ { category: "product_version_range", name: "<19.10", product: { name: "Dell NetWorker <19.10", product_id: "T032354", }, }, { category: "product_version", name: "19.1", product: { name: "Dell NetWorker 19.10", product_id: "T032354-fixed", product_identification_helper: { cpe: "cpe:/a:dell:networker:19.10", }, }, }, ], category: "product_name", name: "NetWorker", }, ], category: "vendor", name: "Dell", }, { branches: [ { branches: [ { category: "product_version", name: "6.2.0-6.4.0", product: { name: "F5 ARX 6.2.0-6.4.0", product_id: "T001664", product_identification_helper: { cpe: "cpe:/a:f5:arx:-", }, }, }, ], category: "product_name", name: "ARX", }, { category: "product_name", name: "F5 BIG-IP", product: { name: "F5 BIG-IP", product_id: "T001663", product_identification_helper: { cpe: "cpe:/a:f5:big-ip:-", }, }, }, { category: "product_name", name: "F5 FirePass", product: { name: "F5 FirePass", product_id: "T001665", product_identification_helper: { cpe: "cpe:/a:f5:firepass:-", }, }, }, { category: "product_name", name: "F5 WAN Optimization Manager", product: { name: "F5 WAN Optimization Manager", product_id: "T001721", product_identification_helper: { cpe: "cpe:/a:f5:big-ip_wan_optimization_manager:-", }, }, }, { category: "product_name", name: "F5 WebAccelerator", product: { name: "F5 WebAccelerator", product_id: "T001411", product_identification_helper: { cpe: "cpe:/h:f5:big-ip_webaccelerator:10.2.4", }, }, }, ], category: "vendor", name: "F5", }, { branches: [ { category: "product_name", name: "Fortinet FortiOS", product: { name: "Fortinet FortiOS", product_id: "T009615", product_identification_helper: { cpe: "cpe:/o:fortinet:fortios:-", }, }, }, ], category: "vendor", name: "Fortinet", }, { branches: [ { branches: [ { category: "product_version", name: "9", product: { name: "FreeBSD Project FreeBSD OS 9", product_id: "157037", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:9.0", }, }, }, { category: "product_version", name: "9.3", product: { name: "FreeBSD Project FreeBSD OS 9.3", product_id: "T003390", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:9.3", }, }, }, { category: "product_version", name: "10-10.3", product: { name: "FreeBSD Project FreeBSD OS 10-10.3", product_id: "T007633", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:10.3", }, }, }, { category: "product_version", name: "11-11.0", product: { name: "FreeBSD Project FreeBSD OS 11-11.0", product_id: "T008147", product_identification_helper: { cpe: "cpe:/o:freebsd:freebsd:11", }, }, }, ], category: "product_name", name: "FreeBSD OS", }, ], category: "vendor", name: "FreeBSD Project", }, { branches: [ { branches: [ { category: "product_version", name: "4", product: { name: "HPE Integrated Lights-Out 4", product_id: "205828", product_identification_helper: { cpe: "cpe:/h:hp:integrated_lights-out:4.0", }, }, }, ], category: "product_name", name: "Integrated Lights-Out", }, { category: "product_name", name: "HPE Loadrunner Software", product: { name: "HPE Loadrunner Software", product_id: "72612", product_identification_helper: { cpe: "cpe:/a:hp:loadrunner:-", }, }, }, { category: "product_name", name: "HPE Performance Center", product: { name: "HPE Performance Center", product_id: "T010661", product_identification_helper: { cpe: "cpe:/a:hp:performance_center:-", }, }, }, { category: "product_name", name: "HPE SiteScope", product: { name: "HPE SiteScope", product_id: "T008871", product_identification_helper: { cpe: "cpe:/a:hp:sitescope:-", }, }, }, ], category: "vendor", name: "HPE", }, { branches: [ { branches: [ { category: "product_version_range", name: "<8.0.0.27", product: { name: "IBM Rational Build Forge <8.0.0.27", product_id: "T038286", }, }, { category: "product_version", name: "8.0.0.27", product: { name: "IBM Rational Build Forge 8.0.0.27", product_id: "T038286-fixed", product_identification_helper: { cpe: "cpe:/a:ibm:rational_build_forge:8.0.0.27", }, }, }, ], category: "product_name", name: "Rational Build Forge", }, ], category: "vendor", name: "IBM", }, { branches: [ { category: "product_name", name: "Juniper JUNOS", product: { name: "Juniper JUNOS", product_id: "5930", product_identification_helper: { cpe: "cpe:/o:juniper:junos:-", }, }, }, { branches: [ { category: "product_name", name: "Juniper Junos Space", product: { name: "Juniper Junos Space", product_id: "T003343", product_identification_helper: { cpe: "cpe:/a:juniper:junos_space:-", }, }, }, { category: "product_version_range", name: "<24.1R2", product: { name: "Juniper Junos Space <24.1R2", product_id: "T040074", }, }, { category: "product_version", name: "24.1R2", product: { name: "Juniper Junos Space 24.1R2", product_id: "T040074-fixed", product_identification_helper: { cpe: "cpe:/a:juniper:junos_space:24.1r2", }, }, }, ], category: "product_name", name: "Junos Space", }, { category: "product_name", name: "Juniper ScreenOS", product: { name: "Juniper ScreenOS", product_id: "T008638", product_identification_helper: { cpe: "cpe:/o:juniper:screenos:-", }, }, }, ], category: "vendor", name: "Juniper", }, { branches: [ { category: "product_name", name: "NetApp OnCommand Unified Manager", product: { name: "NetApp OnCommand Unified Manager", product_id: "T009408", product_identification_helper: { cpe: "cpe:/a:netapp:oncommand_unified_manager:-", }, }, }, ], category: "vendor", name: "NetApp", }, { branches: [ { category: "product_name", name: "Open Source CentOS", product: { name: "Open Source CentOS", product_id: "1727", product_identification_helper: { cpe: "cpe:/o:centos:centos:-", }, }, }, { branches: [ { category: "product_version_range", name: "<1.1.0a", product: { name: "Open Source OpenSSL <1.1.0a", product_id: "T008528", }, }, { category: "product_version", name: "1.1.0a", product: { name: "Open Source OpenSSL 1.1.0a", product_id: "T008528-fixed", product_identification_helper: { cpe: "cpe:/a:openssl:openssl:1.1.0a", }, }, }, { category: "product_version_range", name: "<1.0.2i", product: { name: "Open Source OpenSSL <1.0.2i", product_id: "T008529", }, }, { category: "product_version", name: "1.0.2i", product: { name: "Open Source OpenSSL 1.0.2i", product_id: "T008529-fixed", product_identification_helper: { cpe: "cpe:/a:openssl:openssl:1.0.2i", }, }, }, { category: "product_version_range", name: "<1.0.1u", product: { name: "Open Source OpenSSL <1.0.1u", product_id: "T008530", }, }, { category: "product_version", name: "1.0.1u", product: { name: "Open Source OpenSSL 1.0.1u", product_id: "T008530-fixed", product_identification_helper: { cpe: "cpe:/a:openssl:openssl:1.0.1u", }, }, }, ], category: "product_name", name: "OpenSSL", }, ], category: "vendor", name: "Open Source", }, { branches: [ { category: "product_name", name: "Oracle Linux", product: { name: "Oracle Linux", product_id: "T004914", product_identification_helper: { cpe: "cpe:/o:oracle:linux:-", }, }, }, ], category: "vendor", name: "Oracle", }, { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux", product: { name: "Red Hat Enterprise Linux", product_id: "67646", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:-", }, }, }, ], category: "vendor", name: "Red Hat", }, { branches: [ { category: "product_name", name: "SUSE Linux", product: { name: "SUSE Linux", product_id: "T002207", product_identification_helper: { cpe: "cpe:/o:suse:suse_linux:-", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server", product: { name: "SUSE Linux Enterprise Server", product_id: "T008429", product_identification_helper: { cpe: "cpe:/o:suse:linux_enterprise_server:12:ltss", }, }, }, ], category: "vendor", name: "SUSE", }, { branches: [ { branches: [ { category: "product_version", name: "6.8-6.8.2", product: { name: "Tenable Security Nessus 6.8-6.8.2", product_id: "T008769", product_identification_helper: { cpe: "cpe:/a:tenable:nessus:6.8.2", }, }, }, ], category: "product_name", name: "Nessus", }, ], category: "vendor", name: "Tenable Security", }, { branches: [ { branches: [ { category: "product_version", name: "12.04 LTS", product: { name: "Ubuntu Linux 12.04 LTS", product_id: "170497", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:12.04:-:lts", }, }, }, { category: "product_version", name: "14.04 LTS", product: { name: "Ubuntu Linux 14.04 LTS", product_id: "T003005", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:14.04:-:lts", }, }, }, { category: "product_version", name: "16.04 LTS", product: { name: "Ubuntu Linux 16.04 LTS", product_id: "T007521", product_identification_helper: { cpe: "cpe:/o:canonical:ubuntu_linux:16.04_lts", }, }, }, ], category: "product_name", name: "Linux", }, ], category: "vendor", name: "Ubuntu", }, { branches: [ { category: "product_name", name: "Xerox FreeFlow Print Server", product: { name: "Xerox FreeFlow Print Server", product_id: "T000700", product_identification_helper: { cpe: "cpe:/a:xerox:freeflow_print_server:8", }, }, }, { category: "product_name", name: "Xerox Phaser", product: { name: "Xerox Phaser", product_id: "T004484", product_identification_helper: { cpe: "cpe:/h:xerox:phaser:-", }, }, }, { category: "product_name", name: "Xerox WorkCentre", product: { name: "Xerox WorkCentre", product_id: "T000855", product_identification_helper: { cpe: "cpe:/h:xerox:workcentre:-", }, }, }, ], category: "vendor", name: "Xerox", }, { branches: [ { category: "product_name", name: "Cisco Aironet Access Point", product: { name: "Cisco Aironet Access Point", product_id: "177610", product_identification_helper: { cpe: "cpe:/h:cisco:aironet_3500:-", }, }, }, ], category: "vendor", name: "cisco", }, ], }, vulnerabilities: [ { cve: "CVE-2016-2183", notes: [ { category: "description", text: "Es existiert eine Schwachstelle in OpenSSL im Zusammenhang mit verschlüsselten Sessions, die mit dem Verschlüsselungsalgorithmus Triple-DES (3DES) im Cipher Block Chaining (CBC) Modus chiffriert werden. Diese Schwachstelle beruht darauf, dass 3DES auf einer Blockgröße von 64 Bit basiert und aufgrund des Geburtstagsparadoxons bei größeren Datenmengen deshalb mit hoher Wahrscheinlichkeit Kollisionen im CBC Modus auftreten. In der Folge kann ein Angreifer, welcher sich in einer \"Man-in-the-Middle\" Position befindet und in der Lage ist genügend Datenverkehr mithilfe eines Known Plaintext Angriffs (Angreifer besitzt Geheimtext und den zugehörigen Klartext) zu generieren bzw. mitzulesen, diese Schwachstelle ausnutzen, um einen Kollisionsangriff durchzuführen und verschlüsselte Inhalte offenzulegen. Voraussetzung für einen erfolgreichen Angriff ist, dass bei der Verschlüsselung der CBC Modus verwendet wurde und die mitgelesenen verschlüsselten Daten mit dem gleichen Session Schlüssel chiffriert wurden. Diese Angriffsmethode wird auch \"SWEET32\" genannt.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2183", }, { cve: "CVE-2016-2177", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2177", }, { cve: "CVE-2016-2179", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2179", }, { cve: "CVE-2016-2180", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2180", }, { cve: "CVE-2016-2181", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2181", }, { cve: "CVE-2016-2182", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2182", }, { cve: "CVE-2016-6302", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6302", }, { cve: "CVE-2016-6303", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6303", }, { cve: "CVE-2016-6304", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6304", }, { cve: "CVE-2016-6305", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6305", }, { cve: "CVE-2016-6306", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6306", }, { cve: "CVE-2016-6307", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6307", }, { cve: "CVE-2016-6308", notes: [ { category: "description", text: "In OpenSSL existieren mehrere Denial of Service Schwachstellen. Diese Schwachstellen werden u.a. verursacht durch eine fehlerhafte Programmlogik von OpenSSL, fehlerhafte Längenprüfungen von Nachrichten, die Client Certificates, Client Certificate Requests und Server Certificates betreffen, Funktionsaufrufe von \"SSL_peek()\", den Funktionen \"MDC2_Update\" und \"EVP_DigestUpdate()\", die fehlerhafte Verwendung von TLS Session Tickets, der Funktion \"BN_bn2dec\", der Funktion \"TS_OBJ_print_bio\", Fehler in der DTLS-Implementierung und fehlerhafte Berechnung von Pointern. In der Folge kann ein entfernter, anonymer Angreifer diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.", }, ], product_status: { known_affected: [ "2070", "T001160", "72612", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "T010661", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "T000855", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-6308", }, { cve: "CVE-2016-2178", notes: [ { category: "description", text: "Es existiert eine Schwachstelle in OpenSSL. Ein lokaler Angreifer kann einen Fehler im DSA signing Algorithmus ausnutzen um über einen Side Chanel Angriff sensitive Daten des Signatur-Prozesses offenzulegen. So kann z.B. auch der DSA Private Key offengelegt werden.", }, ], product_status: { known_affected: [ "2070", "T001160", "157037", "T003343", "T009408", "T008638", "T006616", "2153", "T006618", "T006617", "T004914", "148715", "T000756", "T038286", "T001721", "T000752", "5930", "T008871", "T002252", "T001162", "190829", "T006486", "T003254", "T008147", "T003851", "T008429", "64489", "110495", "110496", "161441", "2040", "2084", "T032354", "138491", "T000700", "T002207", "95918", "310725", "T002323", "T003290", "T003053", "T007521", "67646", "T003005", "2056", "189046", "T000614", "T040074", "2002", "T001665", "T001664", "T001069", "T001663", "177610", "18557", "T008530", "153141", "T007044", "161504", "T004484", "T007633", "131351", "T008769", "T008528", "T004721", "T009615", "205828", "T004723", "2143", "2142", "2186", "160893", "T008529", "196900", "170497", "201470", "T001411", "T001530", "T003390", "171387", "1727", "1889", ], }, release_date: "2016-09-22T22:00:00.000+00:00", title: "CVE-2016-2178", }, ], }
fkie_cve-2016-6305
Vulnerability from fkie_nvd
Published
2016-09-26 19:59
Modified
2024-11-21 02:55
Severity ?
Summary
The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.
References
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*", matchCriteriaId: "73104834-5810-48DD-9B97-549D223853F1", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", }, { lang: "es", value: "La función ssl3_read_bytes en record/rec_layer_s3.c en OpenSSL 1.1.0 en versiones anteriores a 1.1.0a permite a atacantes remotos provocar una denegación de servicio (bucle infinito) desencadenando un registro de longitud cero en una llamada SSL_peek.", }, ], id: "CVE-2016-6305", lastModified: "2024-11-21T02:55:51.900", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2016-09-26T19:59:01.597", references: [ { source: "secalert@redhat.com", url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", }, { source: "secalert@redhat.com", url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { source: "secalert@redhat.com", url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { source: "secalert@redhat.com", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { source: "secalert@redhat.com", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { source: "secalert@redhat.com", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { source: "secalert@redhat.com", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { source: "secalert@redhat.com", url: "http://www.securityfocus.com/bid/93149", }, { source: "secalert@redhat.com", url: "http://www.securitytracker.com/id/1036879", }, { source: "secalert@redhat.com", url: "https://bto.bluecoat.com/security-advisory/sa132", }, { source: "secalert@redhat.com", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, { source: "secalert@redhat.com", url: "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9", }, { source: "secalert@redhat.com", tags: [ "Exploit", "Issue Tracking", ], url: "https://github.com/openssl/openssl/issues/1563", }, { source: "secalert@redhat.com", url: "https://security.gentoo.org/glsa/201612-16", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "https://www.openssl.org/news/secadv/20160922.txt", }, { source: "secalert@redhat.com", url: "https://www.tenable.com/security/tns-2016-16", }, { source: "secalert@redhat.com", url: "https://www.tenable.com/security/tns-2016-20", }, { source: "secalert@redhat.com", url: "https://www.tenable.com/security/tns-2016-21", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/93149", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id/1036879", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bto.bluecoat.com/security-advisory/sa132", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=63658103d4441924f8dbfc517b99bb54758a98b9", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Exploit", "Issue Tracking", ], url: "https://github.com/openssl/openssl/issues/1563", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://security.gentoo.org/glsa/201612-16", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://www.openssl.org/news/secadv/20160922.txt", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.tenable.com/security/tns-2016-16", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.tenable.com/security/tns-2016-20", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.tenable.com/security/tns-2016-21", }, ], sourceIdentifier: "secalert@redhat.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-20", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
ghsa-jjf8-m6wr-q4f8
Vulnerability from github
Published
2022-05-14 03:30
Modified
2022-05-14 03:30
Severity ?
Details
The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.
{ affected: [], aliases: [ "CVE-2016-6305", ], database_specific: { cwe_ids: [ "CWE-20", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2016-09-26T19:59:00Z", severity: "HIGH", }, details: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", id: "GHSA-jjf8-m6wr-q4f8", modified: "2022-05-14T03:30:19Z", published: "2022-05-14T03:30:19Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2016-6305", }, { type: "WEB", url: "https://github.com/openssl/openssl/issues/1563", }, { type: "WEB", url: "https://bto.bluecoat.com/security-advisory/sa132", }, { type: "WEB", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, { type: "WEB", url: "https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201612-16", }, { type: "WEB", url: "https://www.openssl.org/news/secadv/20160922.txt", }, { type: "WEB", url: "https://www.tenable.com/security/tns-2016-16", }, { type: "WEB", url: "https://www.tenable.com/security/tns-2016-20", }, { type: "WEB", url: "https://www.tenable.com/security/tns-2016-21", }, { type: "WEB", url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", }, { type: "WEB", url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { type: "WEB", url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { type: "WEB", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { type: "WEB", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { type: "WEB", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { type: "WEB", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { type: "WEB", url: "http://www.securityfocus.com/bid/93149", }, { type: "WEB", url: "http://www.securitytracker.com/id/1036879", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", type: "CVSS_V3", }, ], }
gsd-2016-6305
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.
Aliases
Aliases
{ GSD: { alias: "CVE-2016-6305", description: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", id: "GSD-2016-6305", references: [ "https://www.suse.com/security/cve/CVE-2016-6305.html", "https://advisories.mageia.org/CVE-2016-6305.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2016-6305", ], details: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", id: "GSD-2016-6305", modified: "2023-12-13T01:21:23.358440Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2016-6305", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://www.openssl.org/news/secadv/20160922.txt", refsource: "CONFIRM", url: "https://www.openssl.org/news/secadv/20160922.txt", }, { name: "https://www.tenable.com/security/tns-2016-20", refsource: "CONFIRM", url: "https://www.tenable.com/security/tns-2016-20", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { name: "1036879", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1036879", }, { name: "GLSA-201612-16", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201612-16", }, { name: "https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9", refsource: "CONFIRM", url: "https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9", }, { name: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", refsource: "CONFIRM", url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { name: "https://www.tenable.com/security/tns-2016-16", refsource: "CONFIRM", url: "https://www.tenable.com/security/tns-2016-16", }, { name: "https://www.tenable.com/security/tns-2016-21", refsource: "CONFIRM", url: "https://www.tenable.com/security/tns-2016-21", }, { name: "93149", refsource: "BID", url: "http://www.securityfocus.com/bid/93149", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { name: "https://github.com/openssl/openssl/issues/1563", refsource: "CONFIRM", url: "https://github.com/openssl/openssl/issues/1563", }, { name: "https://bto.bluecoat.com/security-advisory/sa132", refsource: "CONFIRM", url: "https://bto.bluecoat.com/security-advisory/sa132", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { name: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", refsource: "CONFIRM", url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", }, { name: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", refsource: "CONFIRM", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2016-6305", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-20", }, ], }, ], }, references: { reference_data: [ { name: "https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9", refsource: "CONFIRM", tags: [ "Issue Tracking", ], url: "https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9", }, { name: "https://www.openssl.org/news/secadv/20160922.txt", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "https://www.openssl.org/news/secadv/20160922.txt", }, { name: "https://github.com/openssl/openssl/issues/1563", refsource: "CONFIRM", tags: [ "Exploit", "Issue Tracking", ], url: "https://github.com/openssl/openssl/issues/1563", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", refsource: "CONFIRM", tags: [], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { name: "93149", refsource: "BID", tags: [], url: "http://www.securityfocus.com/bid/93149", }, { name: "GLSA-201612-16", refsource: "GENTOO", tags: [], url: "https://security.gentoo.org/glsa/201612-16", }, { name: "https://bto.bluecoat.com/security-advisory/sa132", refsource: "CONFIRM", tags: [], url: "https://bto.bluecoat.com/security-advisory/sa132", }, { name: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", refsource: "CONFIRM", tags: [], url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759", }, { name: "https://www.tenable.com/security/tns-2016-16", refsource: "CONFIRM", tags: [], url: "https://www.tenable.com/security/tns-2016-16", }, { name: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", refsource: "CONFIRM", tags: [], url: "http://www-01.ibm.com/support/docview.wss?uid=swg21995039", }, { name: "1036879", refsource: "SECTRACK", tags: [], url: "http://www.securitytracker.com/id/1036879", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", refsource: "CONFIRM", tags: [], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", refsource: "CONFIRM", tags: [], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", }, { name: "https://www.tenable.com/security/tns-2016-21", refsource: "CONFIRM", tags: [], url: "https://www.tenable.com/security/tns-2016-21", }, { name: "https://www.tenable.com/security/tns-2016-20", refsource: "CONFIRM", tags: [], url: "https://www.tenable.com/security/tns-2016-20", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", refsource: "CONFIRM", tags: [], url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", refsource: "CONFIRM", tags: [], url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html", }, { name: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", refsource: "CONFIRM", tags: [], url: "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", }, ], }, }, impact: { baseMetricV2: { cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 5, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 3.6, }, }, lastModifiedDate: "2022-12-13T12:15Z", publishedDate: "2016-09-26T19:59Z", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.