Vulnerability-Lookup

WID-SEC-W-2023-0427

Vulnerability from csaf_certbund - Published: 2016-03-01 23:00 - Updated: 2025-01-14 23:00

Summary

OpenSSL: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert. Ubuntu Linux ist die Linux Distribution des Herstellers Canonical. Debian ist eine Linux-Distribution, die ausschließlich Freie Software enthält. Red Hat Enterprise Linux HPC Node ist eine Linux-Distribution der Firma Red Hat. Red Hat Enterprise Linux Server EUS ist eine Linux-Distribution der Firma Red Hat. Red Hat Enterprise Linux Workstation ist eine Linux-Distribution der Firma Red Hat. Red Hat Enterprise Linux Server ist eine Linux-Distribution der Firma Red Hat. Red Hat Enterprise Linux Desktop ist eine Linux-Distribution der Firma Red Hat. Red Hat Enterprise Linux Server AUS ist eine Linux-Distribution der Firma Red Hat. Arista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem. Die Produkte der Red Hat Enterprise Linux Produktfamilie sind Linux-Distribution der Firma Red Hat.

Angriff: Ein anonymer, lokaler bzw. entfernter Angreifer kann mehrere Schwachstellen in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server EUS, Red Hat Enterprise Linux Workstation, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux Server AUS, Arista EOS und Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen, beliebigen Programcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand herbeizuführen.

Betroffene Betriebssysteme: - Appliance - F5 Networks - Juniper Appliance - Linux - UNIX - Windows

CVE-2016-0702

Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Server AUS, Red Hat Enterprise Linux Server EUS und Red Hat Enterprise Linux Workstation im Zusammenhang mit OpenSSL. Ein anonymer, lokaler Angreifer, welcher Code in dem gleichen Hyper-Threaded CPU-Kern, wie des Threads seines Opfers läuft manipulieren kann ist in der Lage auf einer Sandy-Bridge Mikroarchitektur den "cache-bank" Konflikt zu nutzen, um die privaten RSA-Schlüsseln zu bekommen.

Affected products

Known affected 59 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
Red Hat Enterprise Linux HPC Node v.7.2 EUS Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.2:eus`	v.7.2 EUS
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
Red Hat Enterprise Linux Desktop v.7 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:7`	v.7
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Red Hat Enterprise Linux HPC Node v.7 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.0`	v.7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Juniper JUNOS Juniper	`cpe:/o:juniper:junos:-`	—
Red Hat Enterprise Linux Workstation v.6 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:6`	v.6
Juniper Junos Space Juniper	`cpe:/a:juniper:junos_space:12.3:p2.8`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
Ubuntu Linux 15.10 Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:15.10`	15.1
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Red Hat Enterprise Linux Desktop v.6 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:6`	v.6
Debian Linux Jessie (8.0) 8 Debian / Linux	`cpe:/o:debian:debian_linux:8.0`	8
Red Hat Enterprise Linux Server v.6 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6`	v.6
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
Red Hat Enterprise Linux Server AUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:v.7.2:aus`	v.7.2
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
Red Hat Enterprise Linux Workstation v.7 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:7`	v.7
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Debian Linux Wheezy (7.0) 7 Debian / Linux	`cpe:/o:debian:debian_linux:7.0`	7
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
Red Hat Enterprise Linux Server v.7 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7::server`	v.7
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Red Hat Enterprise Linux HPC Node v.6 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:6.0`	v.6
Red Hat Enterprise Linux Server EUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7.2`	v.7.2
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
Ubuntu Linux 12.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~`	12.04 LTS
Ubuntu Linux 14.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~`	14.04 LTS
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
Red Hat Enterprise Linux Server EUS v.6.7.z Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.7.z`	v.6.7.z
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

CVE-2016-0703

Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux, Arista EOS und Red Hat Enterprise Linux Server AUS im Zusammenhang mit OpenSSLv2. Ein anonymer, entfernter Angreifer kann diese Schwachstelle nutzen, um aufgezeichneten mit SSLv2 verschlüsselten Netzwerkverkehr zu entschlüsseln.

Affected products

Known affected 52 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Red Hat Enterprise Linux v.5.9 Server Long Life Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:5.9:server:long_life`	v.5.9 Server Long Life
Juniper JUNOS Juniper	`cpe:/o:juniper:junos:-`	—
Red Hat Enterprise Linux Server AUS v.6.4 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.4:server:aus`	v.6.4 AUS
Red Hat Enterprise Linux Server AUS v.6.2 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.2:server:aus`	v.6.2 AUS
Juniper Junos Space Juniper	`cpe:/a:juniper:junos_space:12.3:p2.8`	—
Arista EOS Arista	`cpe:/o:arista:arista_eos:-`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
Red Hat Enterprise Linux v.5.6 Server Long Life Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:5.6:server:long_life`	v.5.6 Server Long Life
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Red Hat Enterprise Linux Server v.6 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6`	v.6
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Red Hat Enterprise Linux v.4 ELS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:4::es`	v.4 ELS
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
Red Hat Enterprise Linux Server AUS v.6.5 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.5:server:aus`	v.6.5 AUS
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Red Hat Enterprise Linux HPC Node v.6 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:6.0`	v.6
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
Ubuntu Linux 12.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~`	12.04 LTS
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

CVE-2016-0704

Es existiert eine Schwachstelle in OpenSSL, Red Hat Enterprise Linux und Red Hat Enterprise Linux Server AUS im Zusammenhang mit dem "Breitenbacher Schutz". Ein anonymer, entfernter Angreifer kann diese Schwachstelle ausnutzen, um den "DROWN-Angriff" (CVE-2016-0800) noch effizienter zu gestalten.

Affected products

Known affected 48 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Red Hat Enterprise Linux v.4 ELS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:4::es`	v.4 ELS
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
Red Hat Enterprise Linux Server AUS v.6.5 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.5:server:aus`	v.6.5 AUS
Red Hat Enterprise Linux v.5.9 Server Long Life Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:5.9:server:long_life`	v.5.9 Server Long Life
Juniper JUNOS Juniper	`cpe:/o:juniper:junos:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Red Hat Enterprise Linux Server AUS v.6.4 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.4:server:aus`	v.6.4 AUS
Red Hat Enterprise Linux Server AUS v.6.2 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.2:server:aus`	v.6.2 AUS
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
Juniper Junos Space Juniper	`cpe:/a:juniper:junos_space:12.3:p2.8`	—
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
Red Hat Enterprise Linux v.5.6 Server Long Life Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:5.6:server:long_life`	v.5.6 Server Long Life
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

CVE-2016-0705

Es existiert eine "double free" Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Server AUS, Red Hat Enterprise Linux Server EUS und Red Hat Enterprise Linux Workstation im Zusammenhang mit privaten DSA-Schlüsseln . Ein anonymer, entfernter Angreifer kann durch das Zuschicken von privaten DSA-Schlüsseln aus nicht vertrauten Quellen Applikationen zum Absturz bringen.

Affected products

Known affected 61 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
Red Hat Enterprise Linux HPC Node v.7.2 EUS Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.2:eus`	v.7.2 EUS
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
NetApp OnCommand Unified Manager NetApp	`cpe:/a:netapp:oncommand_unified_manager:-`	—
Red Hat Enterprise Linux Desktop v.7 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:7`	v.7
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Red Hat Enterprise Linux HPC Node v.7 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.0`	v.7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Juniper JUNOS Juniper	`cpe:/o:juniper:junos:-`	—
Red Hat Enterprise Linux Workstation v.6 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:6`	v.6
Juniper Junos Space Juniper	`cpe:/a:juniper:junos_space:12.3:p2.8`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
EMC VNX2 EMC	`cpe:/h:emc:vnx:-`	—
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
Ubuntu Linux 15.10 Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:15.10`	15.1
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Red Hat Enterprise Linux Desktop v.6 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:6`	v.6
Debian Linux Jessie (8.0) 8 Debian / Linux	`cpe:/o:debian:debian_linux:8.0`	8
Red Hat Enterprise Linux Server v.6 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6`	v.6
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
Red Hat Enterprise Linux Server AUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:v.7.2:aus`	v.7.2
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
Red Hat Enterprise Linux Workstation v.7 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:7`	v.7
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Debian Linux Wheezy (7.0) 7 Debian / Linux	`cpe:/o:debian:debian_linux:7.0`	7
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
Red Hat Enterprise Linux Server v.7 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7::server`	v.7
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Red Hat Enterprise Linux HPC Node v.6 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:6.0`	v.6
Red Hat Enterprise Linux Server EUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7.2`	v.7.2
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
Ubuntu Linux 12.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~`	12.04 LTS
Ubuntu Linux 14.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~`	14.04 LTS
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
Red Hat Enterprise Linux Server EUS v.6.7.z Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.7.z`	v.6.7.z
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

CVE-2016-0797

Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Server AUS, Red Hat Enterprise Linux Server EUS und Red Hat Enterprise Linux Workstation im Zusammenhang mit BIGNUM-Funktionen. Ein anonymer, entfernter Angreifer kann ein Integerüberlauf nutzen, um einen NULL-Pointer Dereferenzierung oder um das Heap zu korrumpieren, wodurch die Applikation zum Absturz gebracht werden kann oder das Ausführen von beliebigen Programmcode erlaubt.

Affected products

Known affected 59 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
Red Hat Enterprise Linux HPC Node v.7.2 EUS Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.2:eus`	v.7.2 EUS
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
Red Hat Enterprise Linux Desktop v.7 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:7`	v.7
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Red Hat Enterprise Linux HPC Node v.7 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.0`	v.7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Juniper JUNOS Juniper	`cpe:/o:juniper:junos:-`	—
Red Hat Enterprise Linux Workstation v.6 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:6`	v.6
Juniper Junos Space Juniper	`cpe:/a:juniper:junos_space:12.3:p2.8`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
Ubuntu Linux 15.10 Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:15.10`	15.1
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Red Hat Enterprise Linux Desktop v.6 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:6`	v.6
Debian Linux Jessie (8.0) 8 Debian / Linux	`cpe:/o:debian:debian_linux:8.0`	8
Red Hat Enterprise Linux Server v.6 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6`	v.6
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
Red Hat Enterprise Linux Server AUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:v.7.2:aus`	v.7.2
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
Red Hat Enterprise Linux Workstation v.7 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:7`	v.7
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Debian Linux Wheezy (7.0) 7 Debian / Linux	`cpe:/o:debian:debian_linux:7.0`	7
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
Red Hat Enterprise Linux Server v.7 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7::server`	v.7
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Red Hat Enterprise Linux HPC Node v.6 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:6.0`	v.6
Red Hat Enterprise Linux Server EUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7.2`	v.7.2
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
Ubuntu Linux 12.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~`	12.04 LTS
Ubuntu Linux 14.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~`	14.04 LTS
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
Red Hat Enterprise Linux Server EUS v.6.7.z Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.7.z`	v.6.7.z
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

CVE-2016-0798

Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0) und Debian Linux Jessie (8.0) im Zusammenhang mit der "SRP_VBASE_get_by_user()" Funktion. Ein anonymer, entfernter Angreifer kann diese Schwachstelle nutzen, um ca. 300 Bytes aus dem Serverspeicher pro Verbindung offenzulegen, indem er einen falschen Benutzernamen verwendet.

Affected products

Known affected 46 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
Juniper JUNOS Juniper	`cpe:/o:juniper:junos:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Debian Linux Wheezy (7.0) 7 Debian / Linux	`cpe:/o:debian:debian_linux:7.0`	7
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
Ubuntu Linux 15.10 Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:15.10`	15.1
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Debian Linux Jessie (8.0) 8 Debian / Linux	`cpe:/o:debian:debian_linux:8.0`	8
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
Ubuntu Linux 12.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~`	12.04 LTS
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
Ubuntu Linux 14.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~`	14.04 LTS
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

CVE-2016-0799

Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0) und Debian Linux Jessie (8.0) im Zusammenhang mit der "BIO_*printf" Funktion. Ein anonymer, entfernter Angreifer kann durch das Zusenden von speziell gestalteten Daten einen Speicherüberlauf erzwingen, wodurch das Ausführen von beliebigem Programcode ermöglicht wird.

Affected products

Known affected 47 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
Juniper JUNOS Juniper	`cpe:/o:juniper:junos:-`	—
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Debian Linux Wheezy (7.0) 7 Debian / Linux	`cpe:/o:debian:debian_linux:7.0`	7
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
Juniper Junos Space Juniper	`cpe:/a:juniper:junos_space:12.3:p2.8`	—
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
Ubuntu Linux 15.10 Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:15.10`	15.1
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Debian Linux Jessie (8.0) 8 Debian / Linux	`cpe:/o:debian:debian_linux:8.0`	8
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
Ubuntu Linux 12.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~`	12.04 LTS
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
Ubuntu Linux 14.04 LTS Ubuntu / Linux	`cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~`	14.04 LTS
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

CVE-2016-0800

Es existiert eine Schwachstelle (DROWN) in OpenSSL, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server EUS, Red Hat Enterprise Linux Workstation, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux Server AUS, Arista EOS und Red Hat Enterprise Linux im Zusammenhang mit SSLv2. Ein anonymer, entfernter Angreifer kann diese Schwachstelle nutzen um RSA-verschlüsselten Ciphertext von neueren SSL/TLS-Versionen zu entschlüsseln.

Affected products

Known affected 66 products

Product	Identifier	Version
Cisco IP Phone Cisco	`cpe:/h:cisco:ip_phone:-`	—
Citrix Systems XenServer Citrix Systems	`cpe:/a:citrix:xenserver:-`	—
Moxa Switch EDS-510A Series Moxa / Switch	`cpe:/h:moxa:switch:eds-510a_series`	EDS-510A Series
Open Source OpenSSL <1.0.1s Open Source / OpenSSL		<1.0.1s
Cisco Unified IP Phone Cisco	`cpe:/h:cisco:unified_ip_phones:-`	—
Red Hat Enterprise Linux Server EUS v.6.6.z Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.6.z`	v.6.6.z
SUSE Linux Enterprise Desktop SUSE	`cpe:/o:suse:linux_enterprise_desktop:11_sp4`	—
Red Hat Enterprise Linux HPC Node v.7.2 EUS Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.2:eus`	v.7.2 EUS
Open Source OpenSSL <1.0.2g Open Source / OpenSSL		<1.0.2g
NetApp OnCommand Unified Manager NetApp	`cpe:/a:netapp:oncommand_unified_manager:-`	—
Red Hat Enterprise Linux Desktop v.7 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:7`	v.7
Cisco Packet Tracer Cisco	`cpe:/a:cisco:packet_tracer:-`	—
Red Hat Enterprise Linux HPC Node v.7 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.0`	v.7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
IBM AIX 6.1 IBM / AIX	`cpe:/o:ibm:aix:6.1`	6.1
Red Hat Enterprise Linux v.5.9 Server Long Life Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:5.9:server:long_life`	v.5.9 Server Long Life
Red Hat Enterprise Linux Server AUS v.6.4 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.4:server:aus`	v.6.4 AUS
Red Hat Enterprise Linux Workstation v.6 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:6`	v.6
Red Hat Enterprise Linux Server AUS v.6.2 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.2:server:aus`	v.6.2 AUS
Juniper Junos Space Juniper	`cpe:/a:juniper:junos_space:12.3:p2.8`	—
Arista EOS Arista	`cpe:/o:arista:arista_eos:-`	—
IBM AIX 7.1 IBM / AIX	`cpe:/o:ibm:aix:7.1`	7.1
Cisco TelePresence Server Cisco	`cpe:/a:cisco:telepresence_server:-`	—
Cisco Unified Computing System (UCS) Cisco	`cpe:/h:cisco:unified_computing_system:-`	—
Red Hat Enterprise Linux v.5.6 Server Long Life Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:5.6:server:long_life`	v.5.6 Server Long Life
Cisco Prime Collaboration Cisco	`cpe:/a:cisco:prime_collaboration:-`	—
Red Hat Enterprise Linux HPC Node v.7.1 EUS Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:7.1`	v.7.1 EUS
Red Hat Enterprise Linux Server v.5 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:5::server`	v.5
Moxa Switch MDS-G4028-L3 Series Moxa / Switch	`cpe:/h:moxa:switch:mds-g4028-l3_series`	MDS-G4028-L3 Series
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Workstation v.5 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:5`	v.5
Cisco Security Manager (CSM) Cisco	`cpe:/a:cisco:security_manager:-`	—
Red Hat Enterprise Linux Desktop v.6 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:6`	v.6
Red Hat Enterprise Linux Server v.6 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6`	v.6
IBM FlashSystem 900 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:900`	900
IBM AIX 5.3 IBM / AIX	`cpe:/o:ibm:aix:5.3`	5.3
IBM FlashSystem 840 IBM / FlashSystem	`cpe:/a:ibm:flashsystem:840`	840
Red Hat Enterprise Linux Server AUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:v.7.2:aus`	v.7.2
SUSE Linux Enterprise Server 11 SP4 SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp4`	11 SP4
Red Hat Enterprise Linux Workstation v.7 Red Hat / Enterprise Linux Workstation	`cpe:/o:redhat:enterprise_linux_workstation:7`	v.7
FreeBSD Project FreeBSD OS FreeBSD Project	`cpe:/o:freebsd:freebsd:-`	—
Moxa Switch EDS-G512E Moxa / Switch	`cpe:/h:moxa:switch:eds-g512e`	EDS-G512E
Moxa Switch Moxa / Switch	`cpe:/h:moxa:switch:-`	—
Red Hat Enterprise Linux v.4 ELS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:4::es`	v.4 ELS
Moxa Switch EDS-508A Series <=3.11 Moxa / Switch		EDS-508A Series <=3.11
Cisco WebEx Cisco	`cpe:/a:cisco:webex:-`	—
Red Hat Enterprise Linux Server AUS v.6.5 AUS Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.5:server:aus`	v.6.5 AUS
F5 BIG-IP F5	`cpe:/a:f5:big-ip:-`	—
Juniper ScreenOS Juniper	`cpe:/o:juniper:screenos:5.4.0`	—
Red Hat Enterprise Linux Desktop v.5 Red Hat / Enterprise Linux Desktop	`cpe:/o:redhat:enterprise_linux_desktop:5:client`	v.5
SUSE Linux Enterprise Server SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp4`	—
Red Hat Enterprise Linux Server v.7 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7::server`	v.7
IBM AIX 7.2 IBM / AIX	`cpe:/o:ibm:aix:7.2`	7.2
SUSE Linux Enterprise Server 11 SP3 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11:sp3:ltss`	11 SP3 LTSS
SUSE Linux Enterprise Server 11 SP2 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:11-sp2-ltss`	11 SP2 LTSS
IBM VIOS 2.2.x IBM / VIOS	`cpe:/a:ibm:vios:2.2.x`	2.2.x
Cisco Unified Communications Manager (CUCM) Cisco	`cpe:/a:cisco:unified_communications_manager:-`	—
SUSE Linux Enterprise Server 10 SP4 LTSS SUSE / Linux Enterprise Server	`cpe:/o:suse:linux_enterprise_server:10:sp4:ltss`	10 SP4 LTSS
Red Hat Enterprise Linux HPC Node v.6 Red Hat / Enterprise Linux HPC Node	`cpe:/o:redhat:enterprise_linux_hpc_node:6.0`	v.6
Red Hat Enterprise Linux Server EUS v.7.2 Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:7.2`	v.7.2
F5 Enterprise Manager F5	`cpe:/a:f5:enterprise_manager:-`	—
Tenable Security Nessus 6.5.5 Tenable Security / Nessus	`cpe:/a:tenable:nessus:6.5.5`	6.5.5
Open Source CentOS Open Source	`cpe:/o:centos:centos:-`	—
Cisco ASA CX Cisco	`cpe:/o:cisco:adaptive_security_appliance:-`	—
Red Hat Enterprise Linux Server EUS v.6.7.z Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:6.7.z`	v.6.7.z
Moxa Switch <PT-G503 v5.3 Moxa / Switch		<PT-G503 v5.3

References

61 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.openssl.org/news/secadv/20160301.txt	external
http://www.ubuntu.com/usn/usn-2914-1/	external
https://www.debian.org/security/2016/dsa-3500	external
https://rhn.redhat.com/errata/RHSA-2016-0305.html	external
https://rhn.redhat.com/errata/RHSA-2016-0302.html	external
https://rhn.redhat.com/errata/RHSA-2016-0301.html	external
https://rhn.redhat.com/errata/RHSA-2016-0304.html	external
https://rhn.redhat.com/errata/RHSA-2016-0303.html	external
https://rhn.redhat.com/errata/RHSA-2016-0306.html	external
https://www.suse.com/support/update/announcement/…	external
http://tools.cisco.com/security/center/content/Ci…	external
https://www.suse.com/support/update/announcement/…	external
http://www.tenable.com/security/tns-2016-03	external
https://www.suse.com/support/update/announcement/…	external
https://support.f5.com/kb/en-us/solutions/public/…	external
https://rhn.redhat.com/errata/RHSA-2016-0379.html	external
https://rhn.redhat.com/errata/RHSA-2016-0372.html	external
https://security.freebsd.org/advisories/FreeBSD-S…	external
https://www.suse.com/support/update/announcement/…	external
http://kb.juniper.net/InfoCenter/index?page=conte…	external
https://rhn.redhat.com/errata/RHSA-2016-0445.html	external
https://rhn.redhat.com/errata/RHSA-2016-0446.html	external
https://lists.opensuse.org/opensuse-security-anno…	external
https://rhn.redhat.com/errata/RHSA-2016-0490.html	external
https://support.f5.com/kb/en-us/solutions/public/…	external
http://support.citrix.com/article/CTX208403	external
http://aix.software.ibm.com/aix/efixes/security/o…	external
https://www.suse.com/support/update/announcement/…	external
https://h20564.www2.hpe.com/hpsc/doc/public/displ…	external
https://support.f5.com/kb/en-us/solutions/public/…	external
https://www.suse.com/support/update/announcement/…	external
https://rhn.redhat.com/errata/RHSA-2016-0996.html	external
https://rhn.redhat.com/errata/RHSA-2016-0722.html	external
http://lists.opensuse.org/opensuse-security-annou…	external
https://www.suse.com/support/update/announcement/…	external
https://rhn.redhat.com/errata/RHSA-2016-1519.html	external
http://support.f5.com/kb/en-us/solutions/public/k…	external
https://kb.juniper.net/InfoCenter/index?page=cont…	external
https://rhn.redhat.com/errata/RHSA-2016-2073.html	external
https://access.redhat.com/errata/RHSA-2016:2073	external
https://networks.unify.com/security/advisories/OB…	external
https://kb.juniper.net/InfoCenter/index?page=cont…	external
http://www.auscert.org.au/render.html?it=42842	external
https://kb.netapp.com/support/s/article/ka51A0000…	external
http://www.brocade.com/content/dam/common/documen…	external
http://rhn.redhat.com/errata/RHSA-2018-2568.html	external
https://www.suse.com/support/update/announcement/…	external
https://support.emc.com/kb/529947	external
http://linux.oracle.com/errata/ELSA-2019-4581.html	external
http://linux.oracle.com/errata/ELSA-2019-4747.html	external
https://kb.pulsesecure.net/articles/Pulse_Securit…	external
https://linux.oracle.com/errata/ELSA-2021-9150.html	external
https://linux.oracle.com/errata/ELSA-2022-9272.html	external
https://www.ibm.com/support/pages/node/695683	external
https://www.moxa.com/en/support/product-support/s…	external
https://www.moxa.com/en/support/product-support/s…	external
https://www.moxa.com/en/support/product-support/s…	external
https://www.moxa.com/en/support/product-support/s…	external
https://www.moxa.com/en/support/product-support/s…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "OpenSSL ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.\r\nUbuntu Linux ist die Linux Distribution des Herstellers Canonical.\r\nDebian ist eine Linux-Distribution, die ausschlie\u00dflich Freie Software enth\u00e4lt.\r\nRed Hat Enterprise Linux HPC Node ist eine Linux-Distribution der Firma Red Hat.\r\nRed Hat Enterprise Linux Server EUS ist eine Linux-Distribution der Firma Red Hat.\r\nRed Hat Enterprise Linux Workstation ist eine Linux-Distribution der Firma Red Hat.\r\nRed Hat Enterprise Linux Server ist eine Linux-Distribution der Firma Red Hat.\r\nRed Hat Enterprise Linux Desktop ist eine Linux-Distribution der Firma Red Hat.\r\nRed Hat Enterprise Linux Server AUS ist eine Linux-Distribution der Firma Red Hat.\r\nArista Extensible Operating System (EOS) ist ein modulares Linux basiertes Netzwerkbetriebssystem.\r\nDie Produkte der Red Hat Enterprise Linux Produktfamilie sind Linux-Distribution der Firma Red Hat.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein anonymer, lokaler bzw. entfernter Angreifer kann mehrere Schwachstellen in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server EUS, Red Hat Enterprise Linux Workstation, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux Server AUS, Arista EOS und Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen, beliebigen Programcode mit den Rechten des Dienstes auszuf\u00fchren oder um einen Denial of Service Zustand herbeizuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Appliance\n- F5 Networks\n- Juniper Appliance\n- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-0427 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2023-0427.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-0427 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0427"
      },
      {
        "category": "external",
        "summary": "OpenSSL Security Advisory vom 2016-03-01",
        "url": "https://www.openssl.org/news/secadv/20160301.txt"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-2914-1 vom 2016-03-01",
        "url": "http://www.ubuntu.com/usn/usn-2914-1/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-3500-1 openssl vom 2016-03-01",
        "url": "https://www.debian.org/security/2016/dsa-3500"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0305-1 vom 2016-03-01",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0305.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0302-1 vom 2016-03-01",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0302.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0301-1 vom 2016-03-01",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0301.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0304-1 vom 2016-03-01",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0304.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0303-1 vom 2016-03-01",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0303.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0306-1 vom 2016-03-01",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0306.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2016:0631-1 vom 2016-03-02",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160631-1.html"
      },
      {
        "category": "external",
        "summary": "CISCO Security Advisory CISCO-SA-20160302-OPENSSL vom 2016-03-03",
        "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update Announcement ID SUSE-SU-2016:0641-1 Stand 2016-03-03",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160641-1.html"
      },
      {
        "category": "external",
        "summary": "Tenable AdvisoryID TNS-2016-03 Stand 2016-03-03",
        "url": "http://www.tenable.com/security/tns-2016-03"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2016:0678-1 vom 2016-03-07",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160678-1.html"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory SOL95463126 vom 2016-03-10",
        "url": "https://support.f5.com/kb/en-us/solutions/public/k/95/sol95463126.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0379 vom 2016-03-09",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0379.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0372 vom 2016-03-09 vom 2016-03-09",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0372.html"
      },
      {
        "category": "external",
        "summary": "FreeBSD Security Advisory FREEBSD-SA-16:12.OPENSSL vom 2016-03-11",
        "url": "https://security.freebsd.org/advisories/FreeBSD-SA-16:12.openssl.asc"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2016:0748-1 vom 2016-03-14",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160748-1.html"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA10722 vom 2016-03-15",
        "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10722"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory RHSA-2016-0445 vom 2016-03-14",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0445.html"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory RHSA-2016-0446",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0446.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2016:0778-1 vom 2016-03-15",
        "url": "https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory RHSA-2016-0490 vom 2016-03-22",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0490.html"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory SOL79215841 vom 2016-03-24",
        "url": "https://support.f5.com/kb/en-us/solutions/public/k/79/sol79215841.html"
      },
      {
        "category": "external",
        "summary": "Citrix Security Bulletin CTX208403 vom 2016-03-31",
        "url": "http://support.citrix.com/article/CTX208403"
      },
      {
        "category": "external",
        "summary": "IBM SECURITY ADVISORY vom 2016-04-11",
        "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory18.asc"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2016:1057-1 vom 2016-04-17",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161057-1.html"
      },
      {
        "category": "external",
        "summary": "HP Security Bulletin C05096953 vom 2016-04-22",
        "url": "https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05096953"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory SOL52349521 vom 2016-04-28",
        "url": "https://support.f5.com/kb/en-us/solutions/public/k/52/sol52349521.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2016:1267-1 vom 2016-05-09",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161267-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0996-2 vom 2016-05-10",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0996.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:0722-1 vom 2016-05-09",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-0722.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update Announcement ID SUSE-SU-2016:1290-1 vom 2016-05-12",
        "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2016:1360-1 vom 2016-05-19",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161360-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:1519 vom 2016-07-28",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-1519.html"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory SOL22334603 vom 2016-03-25",
        "url": "http://support.f5.com/kb/en-us/solutions/public/k/22/sol22334603.html"
      },
      {
        "category": "external",
        "summary": "Juniper Security Bulletin JSA10759 vom 2016-10-14",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759\u0026cat=SIRT_1\u0026actp=LIST"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory RHSA-2016-2073",
        "url": "https://rhn.redhat.com/errata/RHSA-2016-2073.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2016:2073 vom 2016-10-18",
        "url": "https://access.redhat.com/errata/RHSA-2016:2073"
      },
      {
        "category": "external",
        "summary": "UNIFY Security Advisory Report - OBSO-1603-02",
        "url": "https://networks.unify.com/security/advisories/OBSO-1603-02.pdf"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA10774 vom 2017-01-12",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10774"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA10770 vom 2017-01-12",
        "url": "http://www.auscert.org.au/render.html?it=42842"
      },
      {
        "category": "external",
        "summary": "NetApp Advisory NTAP-20160301-0001",
        "url": "https://kb.netapp.com/support/s/article/ka51A00000007ACQAY/cve-2016-0800-sslv2-vulnerability-in-multiple-netapp-products?language=en_US"
      },
      {
        "category": "external",
        "summary": "Brocade Security Advisory BSA-2017-281 vom 2017-05-19",
        "url": "http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-281.htm"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2018:2568 vom 2018-08-27",
        "url": "http://rhn.redhat.com/errata/RHSA-2018-2568.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2018:2839-1 vom 2018-09-24",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182839-1.html"
      },
      {
        "category": "external",
        "summary": "Dell/EMC Knowledge Base Article: 000529947",
        "url": "https://support.emc.com/kb/529947"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13",
        "url": "http://linux.oracle.com/errata/ELSA-2019-4581.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16",
        "url": "http://linux.oracle.com/errata/ELSA-2019-4747.html"
      },
      {
        "category": "external",
        "summary": "Pulse Secure Security Advisory SA44073 vom 2020-06-23",
        "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44073-2019-03-Security-Bulletin-Multiple-vulnerabilities-resolved-in-Pulse-Connect-Secure-Pulse-Policy-Secure-Pulse-Secure-Desktop-9-0R4-8-3R7/?kA23Z000000KBrjSAG="
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01",
        "url": "https://linux.oracle.com/errata/ELSA-2021-9150.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9272.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 695683 vom 2023-02-20",
        "url": "https://www.ibm.com/support/pages/node/695683"
      },
      {
        "category": "external",
        "summary": "Moxa Security Advisory MPSA-230203 vom 2023-11-02",
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230203-pt-g503-series-multiple-vulnerabilities"
      },
      {
        "category": "external",
        "summary": "Moxa Security Advisory MPSA-245831 vom 2024-07-30",
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-245831-eds-510a-series-ssh-cryptographic-algorithm-security-enhancement"
      },
      {
        "category": "external",
        "summary": "Moxa Security Advisory MPSA-241044 vom 2024-11-04",
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241044-vulnerabilities-identified-in-mds-g4028-l3-series-and-eds-g512e"
      },
      {
        "category": "external",
        "summary": "Moxa Security Advisory MPSA-160301 vom 2024-11-20",
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/moxas-response-regarding-sslv2-vulnerabilities-drown"
      },
      {
        "category": "external",
        "summary": "Moxa Security Advisory MPSA-241407 vom 2025-01-15",
        "url": "https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series"
      }
    ],
    "source_lang": "en-US",
    "title": "OpenSSL: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-01-14T23:00:00.000+00:00",
      "generator": {
        "date": "2025-01-15T12:19:04.473+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.10"
        }
      },
      "id": "WID-SEC-W-2023-0427",
      "initial_release_date": "2016-03-01T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2016-03-01T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initial Release"
        },
        {
          "date": "2016-03-01T23:00:00.000+00:00",
          "number": "2",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-01T23:00:00.000+00:00",
          "number": "3",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-02T23:00:00.000+00:00",
          "number": "4",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-02T23:00:00.000+00:00",
          "number": "5",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-03T23:00:00.000+00:00",
          "number": "6",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-03T23:00:00.000+00:00",
          "number": "7",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-03T23:00:00.000+00:00",
          "number": "8",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-03T23:00:00.000+00:00",
          "number": "9",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-07T23:00:00.000+00:00",
          "number": "10",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-09T23:00:00.000+00:00",
          "number": "11",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-09T23:00:00.000+00:00",
          "number": "12",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-09T23:00:00.000+00:00",
          "number": "13",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-09T23:00:00.000+00:00",
          "number": "14",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-10T23:00:00.000+00:00",
          "number": "15",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-10T23:00:00.000+00:00",
          "number": "16",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-14T23:00:00.000+00:00",
          "number": "17",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-14T23:00:00.000+00:00",
          "number": "18",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-14T23:00:00.000+00:00",
          "number": "19",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-14T23:00:00.000+00:00",
          "number": "20",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-15T23:00:00.000+00:00",
          "number": "21",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-22T23:00:00.000+00:00",
          "number": "22",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-23T23:00:00.000+00:00",
          "number": "23",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-23T23:00:00.000+00:00",
          "number": "24",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-23T23:00:00.000+00:00",
          "number": "25",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-03-31T22:00:00.000+00:00",
          "number": "26",
          "summary": "New remediations available"
        },
        {
          "date": "2016-03-31T22:00:00.000+00:00",
          "number": "27",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-04-11T22:00:00.000+00:00",
          "number": "28",
          "summary": "New remediations available"
        },
        {
          "date": "2016-04-17T22:00:00.000+00:00",
          "number": "29",
          "summary": "New remediations available"
        },
        {
          "date": "2016-04-17T22:00:00.000+00:00",
          "number": "30",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-04-24T22:00:00.000+00:00",
          "number": "31",
          "summary": "New remediations available"
        },
        {
          "date": "2016-04-27T22:00:00.000+00:00",
          "number": "32",
          "summary": "New remediations available"
        },
        {
          "date": "2016-05-09T22:00:00.000+00:00",
          "number": "33",
          "summary": "New remediations available"
        },
        {
          "date": "2016-05-09T22:00:00.000+00:00",
          "number": "34",
          "summary": "New remediations available"
        },
        {
          "date": "2016-05-09T22:00:00.000+00:00",
          "number": "35",
          "summary": "New remediations available"
        },
        {
          "date": "2016-05-12T22:00:00.000+00:00",
          "number": "36",
          "summary": "New remediations available"
        },
        {
          "date": "2016-05-12T22:00:00.000+00:00",
          "number": "37",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-05-19T22:00:00.000+00:00",
          "number": "38",
          "summary": "New remediations available"
        },
        {
          "date": "2016-05-19T22:00:00.000+00:00",
          "number": "39",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-07-27T22:00:00.000+00:00",
          "number": "40",
          "summary": "New remediations available"
        },
        {
          "date": "2016-07-27T22:00:00.000+00:00",
          "number": "41",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-09-01T22:00:00.000+00:00",
          "number": "42",
          "summary": "New remediations available"
        },
        {
          "date": "2016-09-01T22:00:00.000+00:00",
          "number": "43",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-10-16T22:00:00.000+00:00",
          "number": "44",
          "summary": "New remediations available"
        },
        {
          "date": "2016-10-16T22:00:00.000+00:00",
          "number": "45",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-10-16T22:00:00.000+00:00",
          "number": "46",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-10-16T22:00:00.000+00:00",
          "number": "47",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-10-17T22:00:00.000+00:00",
          "number": "48",
          "summary": "New remediations available"
        },
        {
          "date": "2016-10-17T22:00:00.000+00:00",
          "number": "49",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2016-10-18T22:00:00.000+00:00",
          "number": "50",
          "summary": "New remediations available"
        },
        {
          "date": "2016-11-07T23:00:00.000+00:00",
          "number": "51",
          "summary": "New remediations available"
        },
        {
          "date": "2017-01-11T23:00:00.000+00:00",
          "number": "52",
          "summary": "New remediations available"
        },
        {
          "date": "2017-02-19T23:00:00.000+00:00",
          "number": "53",
          "summary": "New remediations available"
        },
        {
          "date": "2017-02-19T23:00:00.000+00:00",
          "number": "54",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-05-21T22:00:00.000+00:00",
          "number": "55",
          "summary": "New remediations available"
        },
        {
          "date": "2017-05-21T22:00:00.000+00:00",
          "number": "56",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2017-05-21T22:00:00.000+00:00",
          "number": "57",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2018-08-23T22:00:00.000+00:00",
          "number": "58",
          "summary": "Added references"
        },
        {
          "date": "2018-08-27T22:00:00.000+00:00",
          "number": "59",
          "summary": "New remediations available"
        },
        {
          "date": "2018-09-24T22:00:00.000+00:00",
          "number": "60",
          "summary": "New remediations available"
        },
        {
          "date": "2019-01-30T23:00:00.000+00:00",
          "number": "61",
          "summary": "Neue Updates von EMC aufgenommen"
        },
        {
          "date": "2019-03-13T23:00:00.000+00:00",
          "number": "62",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2019-08-18T22:00:00.000+00:00",
          "number": "63",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2020-06-23T22:00:00.000+00:00",
          "number": "64",
          "summary": "Neue Updates von Pulse Secure aufgenommen"
        },
        {
          "date": "2021-03-31T22:00:00.000+00:00",
          "number": "65",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-04-10T22:00:00.000+00:00",
          "number": "66",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2023-02-19T23:00:00.000+00:00",
          "number": "67",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-11-02T23:00:00.000+00:00",
          "number": "68",
          "summary": "Neue Updates von moxa aufgenommen"
        },
        {
          "date": "2024-07-30T22:00:00.000+00:00",
          "number": "69",
          "summary": "Neue Updates von moxa aufgenommen"
        },
        {
          "date": "2024-11-03T23:00:00.000+00:00",
          "number": "70",
          "summary": "Neue Updates von moxa aufgenommen"
        },
        {
          "date": "2024-11-19T23:00:00.000+00:00",
          "number": "71",
          "summary": "Neue Updates von moxa aufgenommen"
        },
        {
          "date": "2025-01-14T23:00:00.000+00:00",
          "number": "72",
          "summary": "Neue Updates von moxa aufgenommen"
        }
      ],
      "status": "final",
      "version": "72"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Arista EOS",
            "product": {
              "name": "Arista EOS",
              "product_id": "T007065",
              "product_identification_helper": {
                "cpe": "cpe:/o:arista:arista_eos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Arista"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco ASA CX",
            "product": {
              "name": "Cisco ASA CX",
              "product_id": "T001373",
              "product_identification_helper": {
                "cpe": "cpe:/o:cisco:adaptive_security_appliance:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco IP Phone",
            "product": {
              "name": "Cisco IP Phone",
              "product_id": "2070",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:ip_phone:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Packet Tracer",
            "product": {
              "name": "Cisco Packet Tracer",
              "product_id": "T005209",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:packet_tracer:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Prime Collaboration",
            "product": {
              "name": "Cisco Prime Collaboration",
              "product_id": "T003257",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:prime_collaboration:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Security Manager (CSM)",
            "product": {
              "name": "Cisco Security Manager (CSM)",
              "product_id": "95918",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:security_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco TelePresence Server",
            "product": {
              "name": "Cisco TelePresence Server",
              "product_id": "T001271",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:telepresence_server:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Communications Manager (CUCM)",
            "product": {
              "name": "Cisco Unified Communications Manager (CUCM)",
              "product_id": "2142",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:unified_communications_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Computing System (UCS)",
            "product": {
              "name": "Cisco Unified Computing System (UCS)",
              "product_id": "163824",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:unified_computing_system:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified IP Phone",
            "product": {
              "name": "Cisco Unified IP Phone",
              "product_id": "T003264",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:unified_ip_phones:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco WebEx",
            "product": {
              "name": "Cisco WebEx",
              "product_id": "T001747",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:webex:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Citrix Systems XenServer",
            "product": {
              "name": "Citrix Systems XenServer",
              "product_id": "T004077",
              "product_identification_helper": {
                "cpe": "cpe:/a:citrix:xenserver:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Citrix Systems"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7",
                "product": {
                  "name": "Debian Linux Wheezy (7.0) 7",
                  "product_id": "199881",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:debian:debian_linux:7.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8",
                "product": {
                  "name": "Debian Linux Jessie (8.0) 8",
                  "product_id": "310725",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:debian:debian_linux:8.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Linux"
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "EMC VNX2",
            "product": {
              "name": "EMC VNX2",
              "product_id": "T004667",
              "product_identification_helper": {
                "cpe": "cpe:/h:emc:vnx:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "EMC"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "F5 BIG-IP",
            "product": {
              "name": "F5 BIG-IP",
              "product_id": "T001663",
              "product_identification_helper": {
                "cpe": "cpe:/a:f5:big-ip:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "F5 Enterprise Manager",
            "product": {
              "name": "F5 Enterprise Manager",
              "product_id": "T000125",
              "product_identification_helper": {
                "cpe": "cpe:/a:f5:enterprise_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "FreeBSD Project FreeBSD OS",
            "product": {
              "name": "FreeBSD Project FreeBSD OS",
              "product_id": "4035",
              "product_identification_helper": {
                "cpe": "cpe:/o:freebsd:freebsd:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "FreeBSD Project"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.1",
                "product": {
                  "name": "IBM AIX 7.1",
                  "product_id": "153340",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5.3",
                "product": {
                  "name": "IBM AIX 5.3",
                  "product_id": "30418",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:5.3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "6.1",
                "product": {
                  "name": "IBM AIX 6.1",
                  "product_id": "73182",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:6.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.2",
                "product": {
                  "name": "IBM AIX 7.2",
                  "product_id": "T007116",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:ibm:aix:7.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AIX"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "840",
                "product": {
                  "name": "IBM FlashSystem 840",
                  "product_id": "T026432",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:flashsystem:840"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "900",
                "product": {
                  "name": "IBM FlashSystem 900",
                  "product_id": "T026433",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:flashsystem:900"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FlashSystem"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.2.x",
                "product": {
                  "name": "IBM VIOS 2.2.x",
                  "product_id": "T006985",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:vios:2.2.x"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "VIOS"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper JUNOS",
            "product": {
              "name": "Juniper JUNOS",
              "product_id": "5930",
              "product_identification_helper": {
                "cpe": "cpe:/o:juniper:junos:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Juniper Junos Space",
            "product": {
              "name": "Juniper Junos Space",
              "product_id": "T001165",
              "product_identification_helper": {
                "cpe": "cpe:/a:juniper:junos_space:12.3:p2.8"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Juniper ScreenOS",
            "product": {
              "name": "Juniper ScreenOS",
              "product_id": "227372",
              "product_identification_helper": {
                "cpe": "cpe:/o:juniper:screenos:5.4.0"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cPT-G503 v5.3",
                "product": {
                  "name": "Moxa Switch \u003cPT-G503 v5.3",
                  "product_id": "T030907"
                }
              },
              {
                "category": "product_version",
                "name": "PT-G503 v5.3",
                "product": {
                  "name": "Moxa Switch PT-G503 v5.3",
                  "product_id": "T030907-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:switch:pt-g503_v5.3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "EDS-510A Series",
                "product": {
                  "name": "Moxa Switch EDS-510A Series",
                  "product_id": "T036506",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:switch:eds-510a_series"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "MDS-G4028-L3 Series",
                "product": {
                  "name": "Moxa Switch MDS-G4028-L3 Series",
                  "product_id": "T038734",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:switch:mds-g4028-l3_series"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "EDS-G512E",
                "product": {
                  "name": "Moxa Switch EDS-G512E",
                  "product_id": "T038749",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:switch:eds-g512e"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Moxa Switch",
                "product": {
                  "name": "Moxa Switch",
                  "product_id": "T039277",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:moxa:switch:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "EDS-508A Series \u003c=3.11",
                "product": {
                  "name": "Moxa Switch EDS-508A Series \u003c=3.11",
                  "product_id": "T040351"
                }
              },
              {
                "category": "product_version_range",
                "name": "EDS-508A Series \u003c= 3.11",
                "product": {
                  "name": "Moxa Switch EDS-508A Series \u003c= 3.11",
                  "product_id": "T040351-fixed"
                }
              }
            ],
            "category": "product_name",
            "name": "Switch"
          }
        ],
        "category": "vendor",
        "name": "Moxa"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp OnCommand Unified Manager",
            "product": {
              "name": "NetApp OnCommand Unified Manager",
              "product_id": "T009408",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:oncommand_unified_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.0.2g",
                "product": {
                  "name": "Open Source OpenSSL \u003c1.0.2g",
                  "product_id": "T007103"
                }
              },
              {
                "category": "product_version",
                "name": "1.0.2g",
                "product": {
                  "name": "Open Source OpenSSL 1.0.2g",
                  "product_id": "T007103-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:openssl:openssl:1.0.2g"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.0.1s",
                "product": {
                  "name": "Open Source OpenSSL \u003c1.0.1s",
                  "product_id": "T007104"
                }
              },
              {
                "category": "product_version",
                "name": "1.0.1s",
                "product": {
                  "name": "Open Source OpenSSL 1.0.1s",
                  "product_id": "T007104-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:openssl:openssl:1.0.1s"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenSSL"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v.4 ELS",
                "product": {
                  "name": "Red Hat Enterprise Linux v.4 ELS",
                  "product_id": "74250",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.5",
                "product": {
                  "name": "Red Hat Enterprise Linux Server v.5",
                  "product_id": "74289",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.6",
                "product": {
                  "name": "Red Hat Enterprise Linux Server v.6",
                  "product_id": "T000343",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.5.9 Server Long Life",
                "product": {
                  "name": "Red Hat Enterprise Linux v.5.9 Server Long Life",
                  "product_id": "T000831",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5.9:server:long_life"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.6.2 AUS",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS v.6.2 AUS",
                  "product_id": "T002211",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6.2:server:aus"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.6.4 AUS",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS v.6.4 AUS",
                  "product_id": "T002212",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6.4:server:aus"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.6.5 AUS",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS v.6.5 AUS",
                  "product_id": "T002517",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6.5:server:aus"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.7",
                "product": {
                  "name": "Red Hat Enterprise Linux Server v.7",
                  "product_id": "T003550",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.6.6.z",
                "product": {
                  "name": "Red Hat Enterprise Linux Server EUS v.6.6.z",
                  "product_id": "T004034",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6.6.z"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.6.7.z",
                "product": {
                  "name": "Red Hat Enterprise Linux Server EUS v.6.7.z",
                  "product_id": "T006262",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6.7.z"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.7.2",
                "product": {
                  "name": "Red Hat Enterprise Linux Server EUS v.7.2",
                  "product_id": "T007070",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7.2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.7.2",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS v.7.2",
                  "product_id": "T007127",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:v.7.2:aus"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.5.6 Server Long Life",
                "product": {
                  "name": "Red Hat Enterprise Linux v.5.6 Server Long Life",
                  "product_id": "T007135",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5.6:server:long_life"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v.6",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop v.6",
                  "product_id": "T000223",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_desktop:6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.5",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop v.5",
                  "product_id": "T002352",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_desktop:5:client"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.7",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop v.7",
                  "product_id": "T003548",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_desktop:7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux Desktop"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v.7",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node v.7",
                  "product_id": "317232",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:7.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.6",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node v.6",
                  "product_id": "317420",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:6.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.7.1 EUS",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node v.7.1 EUS",
                  "product_id": "T006965",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:7.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.7.2 EUS",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node v.7.2 EUS",
                  "product_id": "T007069",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:7.2:eus"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux HPC Node"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v.6",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation v.6",
                  "product_id": "T000396",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_workstation:6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.5",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation v.5",
                  "product_id": "T000622",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_workstation:5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "v.7",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation v.7",
                  "product_id": "T003565",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux_workstation:7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux Workstation"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "SUSE Linux Enterprise Desktop",
            "product": {
              "name": "SUSE Linux Enterprise Desktop",
              "product_id": "T005444",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:linux_enterprise_desktop:11_sp4"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "10 SP4 LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 10 SP4 LTSS",
                  "product_id": "T002668",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:linux_enterprise_server:10:sp4:ltss"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server",
                "product": {
                  "name": "SUSE Linux Enterprise Server",
                  "product_id": "T005583",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:linux_enterprise_server:11-sp4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "11 SP2 LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP2 LTSS",
                  "product_id": "T005896",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:linux_enterprise_server:11-sp2-ltss"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "11 SP3 LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3 LTSS",
                  "product_id": "T007158",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:linux_enterprise_server:11:sp3:ltss"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "11 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4",
                  "product_id": "T007322",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:linux_enterprise_server:11:sp4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Linux Enterprise Server"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "6.5.5",
                "product": {
                  "name": "Tenable Security Nessus 6.5.5",
                  "product_id": "T007075",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:tenable:nessus:6.5.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Nessus"
          }
        ],
        "category": "vendor",
        "name": "Tenable Security"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "12.04 LTS",
                "product": {
                  "name": "Ubuntu Linux 12.04 LTS",
                  "product_id": "307702",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "14.04 LTS",
                "product": {
                  "name": "Ubuntu Linux 14.04 LTS",
                  "product_id": "308878",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15.1",
                "product": {
                  "name": "Ubuntu Linux 15.10",
                  "product_id": "316506",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:canonical:ubuntu_linux:15.10"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Linux"
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-0702",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Server AUS, Red Hat Enterprise Linux Server EUS und Red Hat Enterprise Linux Workstation im Zusammenhang mit OpenSSL. Ein anonymer, lokaler Angreifer, welcher Code in dem gleichen Hyper-Threaded CPU-Kern, wie des Threads seines Opfers l\u00e4uft manipulieren kann ist in der Lage auf einer Sandy-Bridge Mikroarchitektur den \"cache-bank\" Konflikt zu nutzen, um die privaten RSA-Schl\u00fcsseln zu bekommen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T005444",
          "T007069",
          "T007103",
          "T003548",
          "T005209",
          "317232",
          "T004914",
          "73182",
          "5930",
          "T000396",
          "T001165",
          "153340",
          "T001271",
          "163824",
          "T003257",
          "T038734",
          "316506",
          "T002207",
          "95918",
          "T000223",
          "310725",
          "T000343",
          "T026433",
          "30418",
          "T026432",
          "T007127",
          "T007322",
          "T003565",
          "4035",
          "T038749",
          "T039277",
          "T040351",
          "T001747",
          "T001663",
          "199881",
          "227372",
          "T005583",
          "T003550",
          "T007116",
          "T007158",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "317420",
          "T007070",
          "T000125",
          "T007075",
          "307702",
          "308878",
          "1727",
          "T001373",
          "T006262",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0702"
    },
    {
      "cve": "CVE-2016-0703",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux, Arista EOS und Red Hat Enterprise Linux Server AUS im Zusammenhang mit OpenSSLv2. Ein anonymer, entfernter Angreifer kann diese Schwachstelle nutzen, um aufgezeichneten mit SSLv2 verschl\u00fcsselten Netzwerkverkehr zu entschl\u00fcsseln."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T005444",
          "T007103",
          "T005209",
          "T004914",
          "73182",
          "T000831",
          "5930",
          "T002212",
          "T002211",
          "T001165",
          "T007065",
          "153340",
          "T001271",
          "163824",
          "T007135",
          "T003257",
          "T038734",
          "T002207",
          "95918",
          "T000343",
          "T026433",
          "30418",
          "T026432",
          "T007322",
          "4035",
          "T038749",
          "T039277",
          "74250",
          "T040351",
          "T001747",
          "T002517",
          "T001663",
          "227372",
          "T005583",
          "T007116",
          "T007158",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "317420",
          "T000125",
          "T007075",
          "307702",
          "1727",
          "T001373",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0703"
    },
    {
      "cve": "CVE-2016-0704",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL, Red Hat Enterprise Linux und Red Hat Enterprise Linux Server AUS im Zusammenhang mit dem \"Breitenbacher Schutz\". Ein anonymer, entfernter Angreifer kann diese Schwachstelle ausnutzen, um den \"DROWN-Angriff\" (CVE-2016-0800) noch effizienter zu gestalten."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T005444",
          "T007322",
          "T007103",
          "4035",
          "T038749",
          "T005209",
          "T004914",
          "T039277",
          "74250",
          "T040351",
          "73182",
          "T001747",
          "T002517",
          "T000831",
          "5930",
          "T001663",
          "T002212",
          "T002211",
          "227372",
          "T001165",
          "T005583",
          "153340",
          "T001271",
          "T007116",
          "163824",
          "T007135",
          "T007158",
          "T003257",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "T038734",
          "T002207",
          "T000125",
          "95918",
          "T007075",
          "T026433",
          "30418",
          "1727",
          "T001373",
          "T026432",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0704"
    },
    {
      "cve": "CVE-2016-0705",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine \"double free\" Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Server AUS, Red Hat Enterprise Linux Server EUS und Red Hat Enterprise Linux Workstation im Zusammenhang mit privaten DSA-Schl\u00fcsseln . Ein anonymer, entfernter Angreifer kann durch das Zuschicken von privaten DSA-Schl\u00fcsseln aus nicht vertrauten Quellen Applikationen zum Absturz bringen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T005444",
          "T007069",
          "T007103",
          "T009408",
          "T003548",
          "T005209",
          "317232",
          "T004914",
          "73182",
          "5930",
          "T000396",
          "T001165",
          "153340",
          "T001271",
          "163824",
          "T003257",
          "T004667",
          "T038734",
          "316506",
          "T002207",
          "95918",
          "T000223",
          "310725",
          "T000343",
          "T026433",
          "30418",
          "T026432",
          "T007127",
          "T007322",
          "T003565",
          "4035",
          "T038749",
          "T039277",
          "T040351",
          "T001747",
          "T001663",
          "199881",
          "227372",
          "T005583",
          "T003550",
          "T007116",
          "T007158",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "317420",
          "T007070",
          "T000125",
          "T007075",
          "307702",
          "308878",
          "1727",
          "T001373",
          "T006262",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0705"
    },
    {
      "cve": "CVE-2016-0797",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0), Debian Linux Jessie (8.0), Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Server AUS, Red Hat Enterprise Linux Server EUS und Red Hat Enterprise Linux Workstation im Zusammenhang mit BIGNUM-Funktionen. Ein anonymer, entfernter Angreifer kann ein Integer\u00fcberlauf nutzen, um einen NULL-Pointer Dereferenzierung oder um das Heap zu korrumpieren, wodurch die Applikation zum Absturz gebracht werden kann oder das Ausf\u00fchren von beliebigen Programmcode erlaubt."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T005444",
          "T007069",
          "T007103",
          "T003548",
          "T005209",
          "317232",
          "T004914",
          "73182",
          "5930",
          "T000396",
          "T001165",
          "153340",
          "T001271",
          "163824",
          "T003257",
          "T038734",
          "316506",
          "T002207",
          "95918",
          "T000223",
          "310725",
          "T000343",
          "T026433",
          "30418",
          "T026432",
          "T007127",
          "T007322",
          "T003565",
          "4035",
          "T038749",
          "T039277",
          "T040351",
          "T001747",
          "T001663",
          "199881",
          "227372",
          "T005583",
          "T003550",
          "T007116",
          "T007158",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "317420",
          "T007070",
          "T000125",
          "T007075",
          "307702",
          "308878",
          "1727",
          "T001373",
          "T006262",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0797"
    },
    {
      "cve": "CVE-2016-0798",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0) und Debian Linux Jessie (8.0) im Zusammenhang mit der \"SRP_VBASE_get_by_user()\" Funktion. Ein anonymer, entfernter Angreifer kann diese Schwachstelle nutzen, um ca. 300 Bytes aus dem Serverspeicher pro Verbindung offenzulegen, indem er einen falschen Benutzernamen verwendet."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T005444",
          "T007322",
          "T007103",
          "4035",
          "T038749",
          "T005209",
          "T004914",
          "T039277",
          "T040351",
          "73182",
          "T001747",
          "5930",
          "T001663",
          "199881",
          "227372",
          "T005583",
          "153340",
          "T001271",
          "T007116",
          "163824",
          "T007158",
          "T003257",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "T038734",
          "316506",
          "T002207",
          "T000125",
          "95918",
          "310725",
          "T007075",
          "T026433",
          "307702",
          "30418",
          "308878",
          "1727",
          "T001373",
          "T026432",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0798"
    },
    {
      "cve": "CVE-2016-0799",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in OpenSSL, Ubuntu Linux, Debian Linux Wheezy (7.0) und Debian Linux Jessie (8.0) im Zusammenhang mit der \"BIO_*printf\" Funktion. Ein anonymer, entfernter Angreifer kann durch das Zusenden von speziell gestalteten Daten einen Speicher\u00fcberlauf erzwingen, wodurch das Ausf\u00fchren von beliebigem Programcode erm\u00f6glicht wird."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T005444",
          "T007322",
          "T007103",
          "4035",
          "T038749",
          "T005209",
          "T004914",
          "T039277",
          "T040351",
          "73182",
          "T001747",
          "5930",
          "T001663",
          "199881",
          "227372",
          "T001165",
          "T005583",
          "153340",
          "T001271",
          "T007116",
          "163824",
          "T007158",
          "T003257",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "T038734",
          "316506",
          "T002207",
          "T000125",
          "95918",
          "310725",
          "T007075",
          "T026433",
          "307702",
          "30418",
          "308878",
          "1727",
          "T001373",
          "T026432",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0799"
    },
    {
      "cve": "CVE-2016-0800",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle (DROWN) in OpenSSL, Red Hat Enterprise Linux HPC Node, Red Hat Enterprise Linux Server EUS, Red Hat Enterprise Linux Workstation, Red Hat Enterprise Linux Server, Red Hat Enterprise Linux Desktop, Red Hat Enterprise Linux Server AUS, Arista EOS und Red Hat Enterprise Linux im Zusammenhang mit SSLv2. Ein anonymer, entfernter Angreifer kann diese Schwachstelle nutzen um RSA-verschl\u00fcsselten Ciphertext von neueren SSL/TLS-Versionen zu entschl\u00fcsseln."
        }
      ],
      "product_status": {
        "known_affected": [
          "2070",
          "T004077",
          "T036506",
          "T007104",
          "T003264",
          "T004034",
          "T005444",
          "T007069",
          "T007103",
          "T009408",
          "T003548",
          "T005209",
          "317232",
          "T004914",
          "73182",
          "T000831",
          "T002212",
          "T000396",
          "T002211",
          "T001165",
          "T007065",
          "153340",
          "T001271",
          "163824",
          "T007135",
          "T003257",
          "T006965",
          "74289",
          "T038734",
          "T002207",
          "T000622",
          "95918",
          "T000223",
          "T000343",
          "T026433",
          "30418",
          "T026432",
          "T007127",
          "T007322",
          "T003565",
          "4035",
          "T038749",
          "T039277",
          "74250",
          "T040351",
          "T001747",
          "T002517",
          "T001663",
          "227372",
          "T002352",
          "T005583",
          "T003550",
          "T007116",
          "T007158",
          "T005896",
          "T006985",
          "2142",
          "T002668",
          "317420",
          "T007070",
          "T000125",
          "T007075",
          "1727",
          "T001373",
          "T006262",
          "T030907"
        ]
      },
      "release_date": "2016-03-01T23:00:00.000+00:00",
      "title": "CVE-2016-0800"
    }
  ]
}

CVE-2016-0702 (GCVE-0-2016-0702)

Vulnerability from cvelistv5 – Published: 2016-03-03 00:00 – Updated: 2024-08-05 22:30

Summary

The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

44 references

URL	Tags
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://marc.info/?l=bugtraq&m=145889460330120&w=2	vendor-advisory
http://www.ubuntu.com/usn/USN-2914-1	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Securit…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://openssl.org/news/secadv/20160301.txt
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.debian.org/security/2016/dsa-3500	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt
http://www.oracle.com/technetwork/security-adviso…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
http://cachebleed.info
https://git.openssl.org/?p=openssl.git%3Ba=commit…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://kb.juniper.net/InfoCenter/index?page=conte…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:03.570Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-2802690366",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html"
          },
          {
            "name": "openSUSE-SU-2016:1242",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html"
          },
          {
            "name": "SUSE-SU-2016:1267",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html"
          },
          {
            "name": "FEDORA-2016-e6807b3394",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:1239",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "name": "HPSBGN03563",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145889460330120\u0026w=2"
          },
          {
            "name": "USN-2914-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2914-1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "SUSE-SU-2016:1057",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
          },
          {
            "name": "openSUSE-SU-2016:1566",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "name": "openSUSE-SU-2016:1241",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "SUSE-SU-2016:1360",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "name": "openSUSE-SU-2016:0720",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
          },
          {
            "name": "SUSE-SU-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
          },
          {
            "name": "DSA-3500",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3500"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "name": "SUSE-SU-2016:0631",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "name": "SUSE-SU-2016:1290",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html"
          },
          {
            "name": "openSUSE-SU-2016:1273",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://cachebleed.info"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "openSUSE-SU-2016:0627",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
          },
          {
            "name": "SUSE-SU-2016:0641",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FEDORA-2016-2802690366",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html"
        },
        {
          "name": "openSUSE-SU-2016:1242",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html"
        },
        {
          "name": "SUSE-SU-2016:1267",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html"
        },
        {
          "name": "FEDORA-2016-e6807b3394",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:1239",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "name": "HPSBGN03563",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145889460330120\u0026w=2"
        },
        {
          "name": "USN-2914-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2914-1"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "SUSE-SU-2016:1057",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
        },
        {
          "name": "openSUSE-SU-2016:1566",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "name": "openSUSE-SU-2016:1241",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
        },
        {
          "url": "http://openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "SUSE-SU-2016:1360",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "name": "openSUSE-SU-2016:0720",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
        },
        {
          "name": "SUSE-SU-2016:0624",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
        },
        {
          "name": "DSA-3500",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3500"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "name": "SUSE-SU-2016:0631",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "name": "SUSE-SU-2016:1290",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html"
        },
        {
          "name": "openSUSE-SU-2016:1273",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "url": "http://cachebleed.info"
        },
        {
          "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "openSUSE-SU-2016:0627",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
        },
        {
          "name": "SUSE-SU-2016:0641",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0702",
    "datePublished": "2016-03-03T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:03.570Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0703 (GCVE-0-2016-0703)

Vulnerability from cvelistv5 – Published: 2016-03-02 00:00 – Updated: 2024-08-05 22:30

Summary

The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

31 references

URL	Tags
http://www.oracle.com/technetwork/security-adviso…
http://www.securityfocus.com/bid/83743	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Securit…
https://drownattack.com
https://git.openssl.org/?p=openssl.git%3Ba=commit…
http://openssl.org/news/secadv/20160301.txt
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://kb.juniper.net/InfoCenter/index?page=conte…
https://www.arista.com/en/support/advisories-noti…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:03.398Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
          },
          {
            "name": "83743",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83743"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "SUSE-SU-2016:1057",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://drownattack.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "name": "openSUSE-SU-2016:0720",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
          },
          {
            "name": "SUSE-SU-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "name": "SUSE-SU-2016:0631",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "name": "SUSE-SU-2016:0678",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "SUSE-SU-2016:0641",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
        },
        {
          "name": "83743",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/83743"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "SUSE-SU-2016:1057",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "url": "https://drownattack.com"
        },
        {
          "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97"
        },
        {
          "url": "http://openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "name": "openSUSE-SU-2016:0720",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
        },
        {
          "name": "SUSE-SU-2016:0624",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "name": "SUSE-SU-2016:0631",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "name": "SUSE-SU-2016:0678",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "SUSE-SU-2016:0641",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0703",
    "datePublished": "2016-03-02T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:03.398Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0704 (GCVE-0-2016-0704)

Vulnerability from cvelistv5 – Published: 2016-03-02 00:00 – Updated: 2024-08-05 22:30

Summary

An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

29 references

URL	Tags
http://www.oracle.com/technetwork/security-adviso…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securityfocus.com/bid/83764	vdb-entry
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Securit…
https://drownattack.com
https://git.openssl.org/?p=openssl.git%3Ba=commit…
http://openssl.org/news/secadv/20160301.txt
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://kb.juniper.net/InfoCenter/index?page=conte…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:03.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "name": "83764",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83764"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "SUSE-SU-2016:1057",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://drownattack.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "name": "openSUSE-SU-2016:0720",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
          },
          {
            "name": "SUSE-SU-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "name": "SUSE-SU-2016:0631",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "name": "SUSE-SU-2016:0678",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "SUSE-SU-2016:0641",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "name": "83764",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/83764"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "SUSE-SU-2016:1057",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "url": "https://drownattack.com"
        },
        {
          "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97"
        },
        {
          "url": "http://openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "name": "openSUSE-SU-2016:0720",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
        },
        {
          "name": "SUSE-SU-2016:0624",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "name": "SUSE-SU-2016:0631",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "name": "SUSE-SU-2016:0678",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "SUSE-SU-2016:0641",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0704",
    "datePublished": "2016-03-02T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:03.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0705 (GCVE-0-2016-0705)

Vulnerability from cvelistv5 – Published: 2016-03-03 00:00 – Updated: 2024-08-05 22:30

Summary

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

57 references

URL	Tags
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://source.android.com/security/bulletin/2016-…
https://access.redhat.com/errata/RHSA-2018:2713	vendor-advisory
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisory
http://marc.info/?l=bugtraq&m=146108058503441&w=2	vendor-advisory
http://www.oracle.com/technetwork/security-adviso…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://git.openssl.org/?p=openssl.git%3Ba=commit…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://marc.info/?l=bugtraq&m=145889460330120&w=2	vendor-advisory
http://marc.info/?l=bugtraq&m=145983526810210&w=2	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://access.redhat.com/errata/RHSA-2018:2575	vendor-advisory
http://www.ubuntu.com/usn/USN-2914-1	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Securit…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://openssl.org/news/secadv/20160301.txt
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://access.redhat.com/errata/RHSA-2018:2568	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.debian.org/security/2016/dsa-3500	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt
http://www.oracle.com/technetwork/security-adviso…
http://www.securityfocus.com/bid/91787	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.securityfocus.com/bid/83754	vdb-entry
http://kb.juniper.net/InfoCenter/index?page=conte…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:04.546Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2016-2802690366",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://source.android.com/security/bulletin/2016-05-01.html"
          },
          {
            "name": "RHSA-2018:2713",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2713"
          },
          {
            "name": "FEDORA-2016-e6807b3394",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html"
          },
          {
            "name": "HPSBMU03575",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=146108058503441\u0026w=2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88"
          },
          {
            "name": "openSUSE-SU-2016:1332",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617"
          },
          {
            "name": "HPSBGN03563",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145889460330120\u0026w=2"
          },
          {
            "name": "HPSBGN03569",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380"
          },
          {
            "name": "RHSA-2018:2575",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2575"
          },
          {
            "name": "USN-2914-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2914-1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "SUSE-SU-2016:1057",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
          },
          {
            "name": "openSUSE-SU-2016:1566",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
          },
          {
            "name": "RHSA-2018:2568",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2568"
          },
          {
            "name": "SUSE-SU-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
          },
          {
            "name": "DSA-3500",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3500"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "name": "SUSE-SU-2016:0631",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
          },
          {
            "name": "91787",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91787"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "openSUSE-SU-2016:0627",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990"
          },
          {
            "name": "83754",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83754"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FEDORA-2016-2802690366",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085"
        },
        {
          "url": "http://source.android.com/security/bulletin/2016-05-01.html"
        },
        {
          "name": "RHSA-2018:2713",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2713"
        },
        {
          "name": "FEDORA-2016-e6807b3394",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html"
        },
        {
          "name": "HPSBMU03575",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=146108058503441\u0026w=2"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946"
        },
        {
          "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88"
        },
        {
          "name": "openSUSE-SU-2016:1332",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617"
        },
        {
          "name": "HPSBGN03563",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145889460330120\u0026w=2"
        },
        {
          "name": "HPSBGN03569",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380"
        },
        {
          "name": "RHSA-2018:2575",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2575"
        },
        {
          "name": "USN-2914-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2914-1"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "SUSE-SU-2016:1057",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
        },
        {
          "name": "openSUSE-SU-2016:1566",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404"
        },
        {
          "url": "http://openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
        },
        {
          "name": "RHSA-2018:2568",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2568"
        },
        {
          "name": "SUSE-SU-2016:0624",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
        },
        {
          "name": "DSA-3500",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3500"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "name": "SUSE-SU-2016:0631",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
        },
        {
          "name": "91787",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/91787"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "openSUSE-SU-2016:0627",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990"
        },
        {
          "name": "83754",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/83754"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0705",
    "datePublished": "2016-03-03T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:04.546Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0797 (GCVE-0-2016-0797)

Vulnerability from cvelistv5 – Published: 2016-03-03 00:00 – Updated: 2024-08-05 22:30

Summary

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

44 references

URL	Tags
http://www.oracle.com/technetwork/topics/security…
http://www.securityfocus.com/bid/83763	vdb-entry
https://kc.mcafee.com/corporate/index?page=conten…
http://www.oracle.com/technetwork/security-adviso…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://marc.info/?l=bugtraq&m=145889460330120&w=2	vendor-advisory
http://www.ubuntu.com/usn/USN-2914-1	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Securit…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://git.openssl.org/?p=openssl.git%3Ba=commit…
http://openssl.org/news/secadv/20160301.txt
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.debian.org/security/2016/dsa-3500	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt
http://www.oracle.com/technetwork/security-adviso…
http://www.securityfocus.com/bid/91787	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://kb.juniper.net/InfoCenter/index?page=conte…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:05.030Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "83763",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83763"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10156"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:1239",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "name": "openSUSE-SU-2016:0640",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
          },
          {
            "name": "HPSBGN03563",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145889460330120\u0026w=2"
          },
          {
            "name": "USN-2914-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2914-1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "SUSE-SU-2016:1057",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
          },
          {
            "name": "openSUSE-SU-2016:1566",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "name": "openSUSE-SU-2016:1241",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c175308407858afff3fc8c2e5e085d94d12edc7d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "name": "openSUSE-SU-2016:0720",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
          },
          {
            "name": "SUSE-SU-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
          },
          {
            "name": "DSA-3500",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3500"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "name": "SUSE-SU-2016:0631",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
          },
          {
            "name": "91787",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91787"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "name": "SUSE-SU-2016:0678",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "openSUSE-SU-2016:0627",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
          },
          {
            "name": "SUSE-SU-2016:0641",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "83763",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/83763"
        },
        {
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10156"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:1239",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "name": "openSUSE-SU-2016:0640",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
        },
        {
          "name": "HPSBGN03563",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145889460330120\u0026w=2"
        },
        {
          "name": "USN-2914-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2914-1"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "SUSE-SU-2016:1057",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
        },
        {
          "name": "openSUSE-SU-2016:1566",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "name": "openSUSE-SU-2016:1241",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
        },
        {
          "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c175308407858afff3fc8c2e5e085d94d12edc7d"
        },
        {
          "url": "http://openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "name": "openSUSE-SU-2016:0720",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
        },
        {
          "name": "SUSE-SU-2016:0624",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
        },
        {
          "name": "DSA-3500",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3500"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "name": "SUSE-SU-2016:0631",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
        },
        {
          "name": "91787",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/91787"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "name": "SUSE-SU-2016:0678",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "openSUSE-SU-2016:0627",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
        },
        {
          "name": "SUSE-SU-2016:0641",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0797",
    "datePublished": "2016-03-03T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:05.030Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0798 (GCVE-0-2016-0798)

Vulnerability from cvelistv5 – Published: 2016-03-03 00:00 – Updated: 2024-08-05 22:30

Summary

Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

25 references

URL	Tags
https://git.openssl.org/?p=openssl.git%3Ba=commit…
http://www.oracle.com/technetwork/security-adviso…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.ubuntu.com/usn/USN-2914-1	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
https://kb.pulsesecure.net/articles/Pulse_Securit…
http://openssl.org/news/secadv/20160301.txt
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
http://www.securityfocus.com/bid/83705	vdb-entry
http://www.debian.org/security/2016/dsa-3500	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
https://www.openssl.org/news/secadv/20160301.txt
http://www.oracle.com/technetwork/security-adviso…
http://www.securityfocus.com/bid/91787	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://kb.juniper.net/InfoCenter/index?page=conte…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:05.078Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=259b664f950c2ba66fbf4b0fe5281327904ead21"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "name": "USN-2914-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2914-1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "name": "83705",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83705"
          },
          {
            "name": "DSA-3500",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3500"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
          },
          {
            "name": "91787",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91787"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "openSUSE-SU-2016:0627",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=259b664f950c2ba66fbf4b0fe5281327904ead21"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "name": "USN-2914-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2914-1"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "url": "http://openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "name": "83705",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/83705"
        },
        {
          "name": "DSA-3500",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3500"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
        },
        {
          "name": "91787",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/91787"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "openSUSE-SU-2016:0627",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0798",
    "datePublished": "2016-03-03T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:05.078Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0799 (GCVE-0-2016-0799)

Vulnerability from cvelistv5 – Published: 2016-03-03 00:00 – Updated: 2024-08-05 22:30

Summary

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

59 references

URL	Tags
http://www.oracle.com/technetwork/topics/security…
http://www.securityfocus.com/bid/83755	vdb-entry
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://rhn.redhat.com/errata/RHSA-2016-2073.html	vendor-advisory
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://marc.info/?l=bugtraq&m=146108058503441&w=2	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://www.oracle.com/technetwork/security-adviso…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://marc.info/?l=bugtraq&m=145983526810210&w=2	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.ubuntu.com/usn/USN-2914-1	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Securit…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://openssl.org/news/secadv/20160301.txt
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.debian.org/security/2016/dsa-3500	vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-0996.html	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt
http://www.oracle.com/technetwork/security-adviso…
http://www.securityfocus.com/bid/91787	vdb-entry
https://git.openssl.org/?p=openssl.git%3Ba=commit…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.html	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://rhn.redhat.com/errata/RHSA-2016-0722.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://kb.juniper.net/InfoCenter/index?page=conte…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:05.134Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "83755",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83755"
          },
          {
            "name": "FEDORA-2016-2802690366",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
          },
          {
            "name": "RHSA-2016:2073",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2073.html"
          },
          {
            "name": "FEDORA-2016-e6807b3394",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "HPSBMU03575",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=146108058503441\u0026w=2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "name": "openSUSE-SU-2016:1239",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617"
          },
          {
            "name": "openSUSE-SU-2016:0640",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
          },
          {
            "name": "HPSBGN03569",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380"
          },
          {
            "name": "USN-2914-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2914-1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "name": "SUSE-SU-2016:1057",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404"
          },
          {
            "name": "openSUSE-SU-2016:1241",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://openssl.org/news/secadv/20160301.txt"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877"
          },
          {
            "name": "openSUSE-SU-2016:0720",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
          },
          {
            "name": "SUSE-SU-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
          },
          {
            "name": "DSA-3500",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3500"
          },
          {
            "name": "RHSA-2016:0996",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0996.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "name": "SUSE-SU-2016:0631",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
          },
          {
            "name": "91787",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91787"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "name": "RHSA-2016:2957",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800"
          },
          {
            "name": "RHSA-2016:0722",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0722.html"
          },
          {
            "name": "SUSE-SU-2016:0678",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "SUSE-SU-2016:0641",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "83755",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/83755"
        },
        {
          "name": "FEDORA-2016-2802690366",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
        },
        {
          "name": "RHSA-2016:2073",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2073.html"
        },
        {
          "name": "FEDORA-2016-e6807b3394",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "HPSBMU03575",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=146108058503441\u0026w=2"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "name": "openSUSE-SU-2016:1239",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617"
        },
        {
          "name": "openSUSE-SU-2016:0640",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
        },
        {
          "name": "HPSBGN03569",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380"
        },
        {
          "name": "USN-2914-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2914-1"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "name": "SUSE-SU-2016:1057",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404"
        },
        {
          "name": "openSUSE-SU-2016:1241",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
        },
        {
          "url": "http://openssl.org/news/secadv/20160301.txt"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877"
        },
        {
          "name": "openSUSE-SU-2016:0720",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
        },
        {
          "name": "SUSE-SU-2016:0624",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
        },
        {
          "name": "DSA-3500",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3500"
        },
        {
          "name": "RHSA-2016:0996",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0996.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "name": "SUSE-SU-2016:0631",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
        },
        {
          "name": "91787",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/91787"
        },
        {
          "url": "https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "name": "RHSA-2016:2957",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2957.html"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800"
        },
        {
          "name": "RHSA-2016:0722",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0722.html"
        },
        {
          "name": "SUSE-SU-2016:0678",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "SUSE-SU-2016:0641",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0799",
    "datePublished": "2016-03-03T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:05.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-0800 (GCVE-0-2016-0800)

Vulnerability from cvelistv5 – Published: 2016-03-01 00:00 – Updated: 2024-08-05 22:30

Summary

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.

Severity

No CVSS data available.

CWE

Assigner

redhat

References

63 references

URL	Tags
https://kc.mcafee.com/corporate/index?page=conten…
http://www.oracle.com/technetwork/topics/security…
https://access.redhat.com/security/vulnerabilitie…
http://marc.info/?l=bugtraq&m=146133665209436&w=2	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.oracle.com/technetwork/security-adviso…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://marc.info/?l=bugtraq&m=146108058503441&w=2	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.oracle.com/technetwork/security-adviso…
http://www.huawei.com/en/psirt/security-advisorie…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://security.netapp.com/advisory/ntap-2016030…
http://marc.info/?l=bugtraq&m=145983526810210&w=2	vendor-advisory
https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03
http://www.oracle.com/technetwork/topics/security…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Securit…
https://www.kb.cert.org/vuls/id/583776	third-party-advisory
https://drownattack.com
https://help.ecostruxureit.com/display/public/UAD…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://tools.cisco.com/security/center/content/Ci…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://www.securityfocus.com/bid/83733	vdb-entry
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
https://h20566.www2.hpe.com/hpsc/doc/public/displ…
http://rhn.redhat.com/errata/RHSA-2016-1519.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt
http://www.oracle.com/technetwork/security-adviso…
http://www.securityfocus.com/bid/91787	vdb-entry
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://kb.juniper.net/InfoCenter/index?page=conte…
http://www.siemens.com/cert/pool/cert/siemens_sec…
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://www.oracle.com/technetwork/topics/security…
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://support.citrix.com/article/CTX208403
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://h20566.www2.hpe.com/portal/site/hpsc/publ…
http://kb.juniper.net/InfoCenter/index?page=conte…
https://cert-portal.siemens.com/productcert/pdf/s…
https://www.arista.com/en/support/advisories-noti…
https://cert-portal.siemens.com/productcert/pdf/s…

Date Public

2016-03-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:30:05.111Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10154"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/vulnerabilities/drown"
          },
          {
            "name": "HPSBMU03573",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=146133665209436\u0026w=2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
          },
          {
            "name": "HPSBMU03575",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=146108058503441\u0026w=2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03726en_us"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en"
          },
          {
            "name": "openSUSE-SU-2016:0638",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
          },
          {
            "name": "FreeBSD-SA-16:12",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
          },
          {
            "name": "openSUSE-SU-2016:1239",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
          },
          {
            "name": "SUSE-SU-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
          },
          {
            "name": "openSUSE-SU-2016:0640",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20160301-0001/"
          },
          {
            "name": "HPSBGN03569",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953"
          },
          {
            "name": "SUSE-SU-2016:1057",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
          },
          {
            "name": "VU#583776",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/583776"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://drownattack.com"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
          },
          {
            "name": "openSUSE-SU-2016:1241",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
          },
          {
            "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877"
          },
          {
            "name": "openSUSE-SU-2016:0720",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
          },
          {
            "name": "SUSE-SU-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554"
          },
          {
            "name": "83733",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83733"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
          },
          {
            "name": "RHSA-2016:1519",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1519.html"
          },
          {
            "name": "SUSE-SU-2016:0631",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.openssl.org/news/secadv/20160301.txt"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
          },
          {
            "name": "91787",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91787"
          },
          {
            "name": "SUSE-SU-2016:0617",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10722"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf"
          },
          {
            "name": "GLSA-201603-15",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-15"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX208403"
          },
          {
            "name": "openSUSE-SU-2016:0628",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
          },
          {
            "name": "1035133",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035133"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800"
          },
          {
            "name": "SUSE-SU-2016:0678",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
          },
          {
            "name": "SUSE-SU-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
          },
          {
            "name": "openSUSE-SU-2016:0637",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
          },
          {
            "name": "openSUSE-SU-2016:0627",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
          },
          {
            "name": "SUSE-SU-2016:0641",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-03-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a \"DROWN\" attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10154"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "url": "https://access.redhat.com/security/vulnerabilities/drown"
        },
        {
          "name": "HPSBMU03573",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=146133665209436\u0026w=2"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667"
        },
        {
          "name": "HPSBMU03575",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=146108058503441\u0026w=2"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbgn03726en_us"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
        },
        {
          "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en"
        },
        {
          "name": "openSUSE-SU-2016:0638",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html"
        },
        {
          "name": "FreeBSD-SA-16:12",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"
        },
        {
          "name": "openSUSE-SU-2016:1239",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html"
        },
        {
          "name": "SUSE-SU-2016:0621",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html"
        },
        {
          "name": "openSUSE-SU-2016:0640",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20160301-0001/"
        },
        {
          "name": "HPSBGN03569",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=145983526810210\u0026w=2"
        },
        {
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953"
        },
        {
          "name": "SUSE-SU-2016:1057",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html"
        },
        {
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168"
        },
        {
          "name": "VU#583776",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.kb.cert.org/vuls/id/583776"
        },
        {
          "url": "https://drownattack.com"
        },
        {
          "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
        },
        {
          "name": "openSUSE-SU-2016:1241",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html"
        },
        {
          "name": "20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877"
        },
        {
          "name": "openSUSE-SU-2016:0720",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html"
        },
        {
          "name": "SUSE-SU-2016:0624",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554"
        },
        {
          "name": "83733",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/83733"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441"
        },
        {
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03741en_us"
        },
        {
          "name": "RHSA-2016:1519",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1519.html"
        },
        {
          "name": "SUSE-SU-2016:0631",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html"
        },
        {
          "url": "https://www.openssl.org/news/secadv/20160301.txt"
        },
        {
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html"
        },
        {
          "name": "91787",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/91787"
        },
        {
          "name": "SUSE-SU-2016:0617",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10722"
        },
        {
          "url": "http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf"
        },
        {
          "name": "GLSA-201603-15",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/201603-15"
        },
        {
          "url": "http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681"
        },
        {
          "url": "http://support.citrix.com/article/CTX208403"
        },
        {
          "name": "openSUSE-SU-2016:0628",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html"
        },
        {
          "name": "1035133",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securitytracker.com/id/1035133"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800"
        },
        {
          "name": "SUSE-SU-2016:0678",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html"
        },
        {
          "name": "SUSE-SU-2016:0620",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html"
        },
        {
          "name": "openSUSE-SU-2016:0637",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html"
        },
        {
          "name": "openSUSE-SU-2016:0627",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html"
        },
        {
          "name": "SUSE-SU-2016:0641",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html"
        },
        {
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516"
        },
        {
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf"
        },
        {
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-0800",
    "datePublished": "2016-03-01T00:00:00.000Z",
    "dateReserved": "2015-12-16T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:30:05.111Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2023-0427

CVE-2016-0702 (GCVE-0-2016-0702)

CVE-2016-0703 (GCVE-0-2016-0703)

CVE-2016-0704 (GCVE-0-2016-0704)

CVE-2016-0705 (GCVE-0-2016-0705)

CVE-2016-0797 (GCVE-0-2016-0797)

CVE-2016-0798 (GCVE-0-2016-0798)

CVE-2016-0799 (GCVE-0-2016-0799)

CVE-2016-0800 (GCVE-0-2016-0800)

Tags

Sightings

Nomenclature