wid-sec-w-2024-0215
Vulnerability from csaf_certbund
Published
2016-05-03 22:00
Modified
2024-01-25 23:00
Summary
OpenSSL: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.
Angriff
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchführen, beliebigen Programmcode ausführen oder sensible Informationen ausspähen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- CISCO Appliance
- Juniper Appliance
- Appliance
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "OpenSSL ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchf\u00fchren, beliebigen Programmcode ausf\u00fchren oder sensible Informationen aussp\u00e4hen.", "title": "Angriff" }, { "category": "general", "text": "- UNIX\n- Linux\n- Windows\n- CISCO Appliance\n- Juniper Appliance\n- Appliance", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0215 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2024-0215.json" }, { "category": "self", "summary": "WID-SEC-2024-0215 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0215" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2016:1206 vom 2016-05-03", "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161206-1.html" }, { "category": "external", "summary": "Debian Security Advisory DSA-3566 vom 2016-05-03", "url": "https://www.debian.org/security/2016/dsa-3566" }, { "category": "external", "summary": "Ubuntu Security Notice USN-2959 vom 2016-05-03", "url": "http://www.ubuntu.com/usn/usn-2959-1/" }, { "category": "external", "summary": "OpenSSL Security Advisory vom 2016-05-03", "url": "https://www.openssl.org/news/secadv/20160503.txt" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2016:1228-1 vom 2016-05-04", "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161228-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2016:1233-1 vom 2016-05-04", "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161233-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2016:1231-1 vom 2016-05-04", "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161231-1.html" }, { "category": "external", "summary": "The FreeBSD Project Security Advisory FreeBSD-SA-16:17.openssl vom 2016-05-04", "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc" }, { "category": "external", "summary": "Cisco Security Advisory cisco-sa-20160504-openssl Stand 2016-05-05", "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl" }, { "category": "external", "summary": "Arista Security Advisory 0020 vom 2016-05-06", "url": "http://www.arista.com/en/support/advisories-notices/security-advisories/1334-security-advisory-20" }, { "category": "external", "summary": "F5 Security Advisory sol23230229 vom 2016-05-06", "url": "https://support.f5.com/kb/en-us/solutions/public/k/23/sol23230229.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2016:1267-1 vom 2016-05-09", "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161267-1.html" }, { "category": "external", "summary": "BLUECOAT Security Advisory SA12 vom 2016-05-10", "url": "https://bto.bluecoat.com/security-advisory/sa123" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2016:0996-2 vom 2016-05-10", "url": "https://rhn.redhat.com/errata/RHSA-2016-0996.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2016:0722-1 vom 2016-05-09", "url": "https://rhn.redhat.com/errata/RHSA-2016-0722.html" }, { "category": "external", "summary": "SUSE Security Update Announcement ID SUSE-SU-2016:1290-1 vom 2016-05-12", "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2016:1360-1 vom 2016-05-19", "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161360-1.html" }, { "category": "external", "summary": "F5 Security Advisory sol36488941 vom 2016-05-19", "url": "https://support.f5.com/kb/en-us/solutions/public/k/36/sol36488941.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2016:1137-1 vom 2016-05-31", "url": "http://rhn.redhat.com/errata/RHSA-2016-1137.html" }, { "category": "external", "summary": "Splunk Advisory SPL-119440 vom 2016-06-07", "url": "http://www.splunk.com/view/SP-CAAAPPQ" }, { "category": "external", "summary": "Splunk Advisory SP-CAAAPP4 vom 2016-07-14", "url": "http://www.splunk.com/view/SP-CAAAPP4" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2016:1650-1 vom 2016-08-22", "url": "https://rhn.redhat.com/errata/RHSA-2016-1650.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2016:1649-1 vom 2016-08-22 vom 2016-08-22", "url": "https://rhn.redhat.com/errata/RHSA-2016-1649.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2016:16489-1 vom 2016-08-22 vom 2016-08-22", "url": "https://rhn.redhat.com/errata/RHSA-2016-1648.html" }, { "category": "external", "summary": "Juniper Security Bulletin JSA10759 vom 2016-10-14", "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759\u0026cat=SIRT_1\u0026actp=LIST" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2016:2073 vom 2016-10-18", "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "category": "external", "summary": "F5 Security Advisory SOL51920288 vom 2016-11-14", "url": "https://support.f5.com/kb/en-us/solutions/public/k/51/sol51920288.html" }, { "category": "external", "summary": "F5 Security Advisory SOL13123 vom 2016-11-18", "url": "https://support.f5.com/kb/en-us/solutions/public/k/93/sol93600123.html" }, { "category": "external", "summary": "F5 Security Advisory SOL16871115 vom 2016-12-02", "url": "https://support.f5.com/kb/en-us/solutions/public/k/16/sol16871115.html" }, { "category": "external", "summary": "F5 Security Advisory SOL37345003 vom 2016-12-02", "url": "https://support.f5.com/kb/en-us/solutions/public/k/37/sol37345003.html" }, { "category": "external", "summary": "F5 Security Advisory SOL08654415 vom 2016-12-02", "url": "https://support.f5.com/kb/en-us/solutions/public/k/08/sol08654415.html" }, { "category": "external", "summary": "F5 Security Advisory SOL04347850 vom 2016-12-02", "url": "https://support.f5.com/kb/en-us/solutions/public/k/04/sol04347850.html" }, { "category": "external", "summary": "F5 Security Advisory SOL93600123 vom 2016-05-06", "url": "http://support.f5.com/kb/en-us/solutions/public/k/93/sol93600123.html?ref=rss" }, { "category": "external", "summary": "Sophos UTM Release Notes vom 2016-12-08", "url": "https://community.sophos.com/products/unified-threat-management/b/utm-blog/posts/utm-up2date-9-321-released" }, { "category": "external", "summary": "Sophos UTM Release Notes Stand 2016-12-08", "url": "https://community.sophos.com/products/unified-threat-management/b/utm-blog/posts/utm-up2date-9-358-released" }, { "category": "external", "summary": "EMC Knowledge Base Article: 000493630", "url": "https://support.emc.com/kb/493630" }, { "category": "external", "summary": "Juniper Security Advisory JSA10774 vom 2017-01-12", "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10774" }, { "category": "external", "summary": "Juniper Security Advisory JSA10770 vom 2017-01-12", "url": "http://www.auscert.org.au/render.html?it=42842" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2017:0461-1 vom 2017-02-15", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170461-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2017:0495-1 vom 2017-02-17", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170495-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2017:0585-1 vom 2017-03-02", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170585-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2017:0605-1 vom 2017-03-03", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170605-1.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2017:0601-1 vom 2017-03-04", "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170601-1.html" }, { "category": "external", "summary": "NetApp Advisory Number NTAP-20160504-0001 vom 2017-04-06", "url": "https://kb.netapp.com/support/s/article/ka51A00000007QKQAY/may-2016-openssl-vulnerabilities-in-multiple-netapp-products?language=en_US" }, { "category": "external", "summary": "NetApp Security Advisory NTAP-20160504-0001 vom 2017-11-07", "url": "https://security.netapp.com/advisory/ntap-20160504-0001/" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2018:0112-1 vom 2018-01-16", "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180112-1.html" }, { "category": "external", "summary": "Citrix Security Bulletin CTX233832", "url": "https://support.citrix.com/article/CTX233832" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13", "url": "http://linux.oracle.com/errata/ELSA-2019-4581.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16", "url": "http://linux.oracle.com/errata/ELSA-2019-4747.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01", "url": "https://linux.oracle.com/errata/ELSA-2021-9150.html" }, { "category": "external", "summary": "Huawei Security Advisory HUAWEI-SA-20160706-01-OPENSSL vom 2021-12-22", "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160706-01-openssl-en" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08", "url": "https://linux.oracle.com/errata/ELSA-2022-9272.html" }, { "category": "external", "summary": "Dell Knowledge Base Article", "url": "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities" } ], "source_lang": "en-US", "title": "OpenSSL: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-01-25T23:00:00.000+00:00", "generator": { "date": "2024-02-15T17:58:12.693+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-0215", "initial_release_date": "2016-05-03T22:00:00.000+00:00", "revision_history": [ { "date": "2016-05-03T22:00:00.000+00:00", "number": "1", "summary": "Initial Release" }, { "date": "2016-05-03T22:00:00.000+00:00", "number": "2", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "3", "summary": "New remediations available" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "4", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "5", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "6", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "7", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "8", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "9", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "10", "summary": "Version nicht vorhanden" }, { "date": "2016-05-04T22:00:00.000+00:00", "number": "11", "summary": "Version nicht vorhanden" }, { "date": "2016-05-08T22:00:00.000+00:00", "number": "12", "summary": "New remediations available" }, { "date": "2016-05-08T22:00:00.000+00:00", "number": "13", "summary": "Version nicht vorhanden" }, { "date": "2016-05-08T22:00:00.000+00:00", "number": "14", "summary": "Version nicht vorhanden" }, { "date": "2016-05-08T22:00:00.000+00:00", "number": "15", "summary": "New remediations available" }, { "date": "2016-05-08T22:00:00.000+00:00", "number": "16", "summary": "Version nicht vorhanden" }, { "date": "2016-05-09T22:00:00.000+00:00", "number": "17", "summary": "New remediations available" }, { "date": "2016-05-09T22:00:00.000+00:00", "number": "18", "summary": "Version nicht vorhanden" }, { "date": "2016-05-09T22:00:00.000+00:00", "number": "19", "summary": "New remediations available" }, { "date": "2016-05-09T22:00:00.000+00:00", "number": "20", "summary": "Version nicht vorhanden" }, { "date": "2016-05-09T22:00:00.000+00:00", "number": "21", "summary": "New remediations available" }, { "date": "2016-05-09T22:00:00.000+00:00", "number": "22", "summary": "Version nicht vorhanden" }, { "date": "2016-05-12T22:00:00.000+00:00", "number": "23", "summary": "New remediations available" }, { "date": "2016-05-12T22:00:00.000+00:00", "number": "24", "summary": "Version nicht vorhanden" }, { "date": "2016-05-19T22:00:00.000+00:00", "number": "25", "summary": "New remediations available" }, { "date": "2016-05-19T22:00:00.000+00:00", "number": "26", "summary": "Version nicht vorhanden" }, { "date": "2016-05-19T22:00:00.000+00:00", "number": "27", "summary": "New remediations available" }, { "date": "2016-05-30T22:00:00.000+00:00", "number": "28", "summary": "New remediations available" }, { "date": "2016-05-30T22:00:00.000+00:00", "number": "29", "summary": "Version nicht vorhanden" }, { "date": "2016-06-20T22:00:00.000+00:00", "number": "30", "summary": "New remediations available" }, { "date": "2016-06-20T22:00:00.000+00:00", "number": "31", "summary": "Version nicht vorhanden" }, { "date": "2016-07-14T22:00:00.000+00:00", "number": "32", "summary": "New remediations available" }, { "date": "2016-07-14T22:00:00.000+00:00", "number": "33", "summary": "Version nicht vorhanden" }, { "date": "2016-08-22T22:00:00.000+00:00", "number": "34", "summary": "New remediations available" }, { "date": "2016-08-22T22:00:00.000+00:00", "number": "35", "summary": "Version nicht vorhanden" }, { "date": "2016-08-22T22:00:00.000+00:00", "number": "36", "summary": "Version nicht vorhanden" }, { "date": "2016-10-16T22:00:00.000+00:00", "number": "37", "summary": "New remediations available" }, { "date": "2016-10-16T22:00:00.000+00:00", "number": "38", "summary": "Version nicht vorhanden" }, { "date": "2016-10-16T22:00:00.000+00:00", "number": "39", "summary": "Version nicht vorhanden" }, { "date": "2016-10-16T22:00:00.000+00:00", "number": "40", "summary": "Version nicht vorhanden" }, { "date": "2016-10-18T22:00:00.000+00:00", "number": "41", "summary": "New remediations available" }, { "date": "2016-11-14T23:00:00.000+00:00", "number": "42", "summary": "New remediations available" }, { "date": "2016-11-20T23:00:00.000+00:00", "number": "43", "summary": "New remediations available" }, { "date": "2016-12-01T23:00:00.000+00:00", "number": "44", "summary": "New remediations available" }, { "date": "2016-12-05T23:00:00.000+00:00", "number": "45", "summary": "New remediations available" }, { "date": "2016-12-08T23:00:00.000+00:00", "number": "46", "summary": "New remediations available" }, { "date": "2016-12-08T23:00:00.000+00:00", "number": "47", "summary": "Version nicht vorhanden" }, { "date": "2016-12-08T23:00:00.000+00:00", "number": "48", "summary": "New remediations available" }, { "date": "2016-12-20T23:00:00.000+00:00", "number": "49", "summary": "New remediations available" }, { "date": "2016-12-20T23:00:00.000+00:00", "number": "50", "summary": "Version nicht vorhanden" }, { "date": "2016-12-20T23:00:00.000+00:00", "number": "51", "summary": "Version nicht vorhanden" }, { "date": "2016-12-20T23:00:00.000+00:00", "number": "52", "summary": "Version nicht vorhanden" }, { "date": "2016-12-20T23:00:00.000+00:00", "number": "53", "summary": "Version nicht vorhanden" }, { "date": "2016-12-20T23:00:00.000+00:00", "number": "54", "summary": "Version nicht vorhanden" }, { "date": "2016-12-20T23:00:00.000+00:00", "number": "55", "summary": "Version nicht vorhanden" }, { "date": "2017-01-11T23:00:00.000+00:00", "number": "56", "summary": "New remediations available" }, { "date": "2017-02-15T23:00:00.000+00:00", "number": "57", "summary": "New remediations available" }, { "date": "2017-02-19T23:00:00.000+00:00", "number": "58", "summary": "New remediations available" }, { "date": "2017-03-02T23:00:00.000+00:00", "number": "59", "summary": "New remediations available" }, { "date": "2017-03-05T23:00:00.000+00:00", "number": "60", "summary": "New remediations available" }, { "date": "2017-03-05T23:00:00.000+00:00", "number": "61", "summary": "New remediations available" }, { "date": "2017-08-27T22:00:00.000+00:00", "number": "62", "summary": "reference added" }, { "date": "2017-08-27T22:00:00.000+00:00", "number": "63", "summary": "Version nicht vorhanden" }, { "date": "2017-11-06T23:00:00.000+00:00", "number": "64", "summary": "New remediations available" }, { "date": "2018-01-16T23:00:00.000+00:00", "number": "65", "summary": "New remediations available" }, { "date": "2018-04-02T22:00:00.000+00:00", "number": "66", "summary": "New remediations available" }, { "date": "2018-04-02T22:00:00.000+00:00", "number": "67", "summary": "Version nicht vorhanden" }, { "date": "2019-03-13T23:00:00.000+00:00", "number": "68", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2019-08-18T22:00:00.000+00:00", "number": "69", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2021-03-31T22:00:00.000+00:00", "number": "70", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2021-12-22T23:00:00.000+00:00", "number": "71", "summary": "Neue Updates von Huawei aufgenommen" }, { "date": "2022-04-10T22:00:00.000+00:00", "number": "72", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2024-01-25T23:00:00.000+00:00", "number": "73", "summary": "Neue Updates von Dell aufgenommen" } ], "status": "final", "version": "73" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Arista EOS \u003c= 4.15", "product": { "name": "Arista EOS \u003c= 4.15", "product_id": "T006486", "product_identification_helper": { "cpe": "cpe:/o:arista:arista_eos:4.15" } } } ], "category": "vendor", "name": "Arista" }, { "branches": [ { "category": "product_name", "name": "Cisco Emergency Responder (ER)", "product": { "name": "Cisco Emergency Responder (ER)", "product_id": "2040", "product_identification_helper": { "cpe": "cpe:/a:cisco:emergency_responder:-" } } }, { "category": "product_name", "name": "Cisco MDS 9000", "product": { "name": "Cisco MDS 9000", "product_id": "T001069", "product_identification_helper": { "cpe": "cpe:/o:cisco:mds_9000:-" } } }, { "category": "product_name", "name": "Cisco Media Experience Engine (MXE)", "product": { "name": "Cisco Media Experience Engine (MXE)", "product_id": "T003261", "product_identification_helper": { "cpe": "cpe:/a:cisco:media_experience_engine:-" } } }, { "category": "product_name", "name": "Cisco Network Analysis Module", "product": { "name": "Cisco Network Analysis Module", "product_id": "2084", "product_identification_helper": { "cpe": "cpe:/h:cisco:network_analysis_module:-" } } }, { "category": "product_name", "name": "Cisco Packet Tracer", "product": { "name": "Cisco Packet Tracer", "product_id": "T005209", "product_identification_helper": { "cpe": "cpe:/a:cisco:packet_tracer:-" } } }, { "category": "product_name", "name": "Cisco Prime Infrastructure", "product": { "name": "Cisco Prime Infrastructure", "product_id": "T000756", "product_identification_helper": { "cpe": "cpe:/a:cisco:prime_infrastructure:-" } } }, { "category": "product_name", "name": "Cisco Unified Communications Manager (CUCM)", "product": { "name": "Cisco Unified Communications Manager (CUCM)", "product_id": "2142", "product_identification_helper": { "cpe": "cpe:/a:cisco:unified_communications_manager:-" } } }, { "category": "product_name", "name": "Cisco Unified IP Phone", "product": { "name": "Cisco Unified IP Phone", "product_id": "T003264", "product_identification_helper": { "cpe": "cpe:/h:cisco:unified_ip_phones:-" } } }, { "category": "product_name", "name": "Cisco WebEx Meetings Server", "product": { "name": "Cisco WebEx Meetings Server", "product_id": "T001160", "product_identification_helper": { "cpe": "cpe:/a:cisco:webex_meetings_server:-" } } } ], "category": "vendor", "name": "Cisco" }, { "branches": [ { "category": "product_name", "name": "Citrix Systems XenServer 7.2", "product": { "name": "Citrix Systems XenServer 7.2", "product_id": "T010154", "product_identification_helper": { "cpe": "cpe:/a:citrix:xenserver:7.2" } } } ], "category": "vendor", "name": "Citrix Systems" }, { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Dell NetWorker \u003c 19.10", "product": { "name": "Dell NetWorker \u003c 19.10", "product_id": "T032354", "product_identification_helper": { "cpe": "cpe:/a:dell:networker:19.10" } } } ], "category": "vendor", "name": "Dell" }, { "branches": [ { "category": "product_name", "name": "EMC VNXe 1600", "product": { "name": "EMC VNXe 1600", "product_id": "T009106", "product_identification_helper": { "cpe": "cpe:/h:emc:vnx:1600" } } } ], "category": "vendor", "name": "EMC" }, { "branches": [ { "category": "product_name", "name": "FreeBSD Project FreeBSD OS", "product": { "name": "FreeBSD Project FreeBSD OS", "product_id": "4035", "product_identification_helper": { "cpe": "cpe:/o:freebsd:freebsd:-" } } } ], "category": "vendor", "name": "FreeBSD Project" }, { "branches": [ { "category": "product_name", "name": "Juniper JUNOS", "product": { "name": "Juniper JUNOS", "product_id": "5930", "product_identification_helper": { "cpe": "cpe:/o:juniper:junos:-" } } }, { "category": "product_name", "name": "Juniper Junos Space", "product": { "name": "Juniper Junos Space", "product_id": "T003343", "product_identification_helper": { "cpe": "cpe:/a:juniper:junos_space:-" } } }, { "category": "product_name", "name": "Juniper ScreenOS", "product": { "name": "Juniper ScreenOS", "product_id": "T008638", "product_identification_helper": { "cpe": "cpe:/o:juniper:screenos:-" } } } ], "category": "vendor", "name": "Juniper" }, { "branches": [ { "category": "product_name", "name": "NetApp OnCommand Unified Manager", "product": { "name": "NetApp OnCommand Unified Manager", "product_id": "T009408", "product_identification_helper": { "cpe": "cpe:/a:netapp:oncommand_unified_manager:-" } } } ], "category": "vendor", "name": "NetApp" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Open Source OpenSSL \u003c 1.0.1t", "product": { "name": "Open Source OpenSSL \u003c 1.0.1t", "product_id": "T007519", "product_identification_helper": { "cpe": "cpe:/a:openssl:openssl:1.0.1t" } } }, { "category": "product_name", "name": "Open Source OpenSSL \u003c 1.0.2h", "product": { "name": "Open Source OpenSSL \u003c 1.0.2h", "product_id": "T007520", "product_identification_helper": { "cpe": "cpe:/a:openssl:openssl:1.0.2h" } } } ], "category": "product_name", "name": "OpenSSL" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server 5", "product": { "name": "Red Hat Enterprise Linux Server 5", "product_id": "74289", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server 6", "product": { "name": "Red Hat Enterprise Linux Server 6", "product_id": "T000343", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server 7", "product": { "name": "Red Hat Enterprise Linux Server 7", "product_id": "T003550", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS 7.2", "product": { "name": "Red Hat Enterprise Linux Server AUS 7.2", "product_id": "T007127", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:v.7.2:aus" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server EUS 7.2", "product": { "name": "Red Hat Enterprise Linux Server EUS 7.2", "product_id": "T007218", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7.2:eus" } } } ], "category": "product_name", "name": "Enterprise Linux" }, { "category": "product_name", "name": "Red Hat JBoss Web Server", "product": { "name": "Red Hat JBoss Web Server", "product_id": "T003426", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Sophos Unified Threat Management (UTM) Software", "product": { "name": "Sophos Unified Threat Management (UTM) Software", "product_id": "T006910", "product_identification_helper": { "cpe": "cpe:/a:sophos:unified_threat_management_software:-" } } } ], "category": "vendor", "name": "Sophos" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Splunk Splunk Enterprise 6.2.10", "product": { "name": "Splunk Splunk Enterprise 6.2.10", "product_id": "T007880", "product_identification_helper": { "cpe": "cpe:/a:splunk:splunk:6.2.10" } } }, { "category": "product_name", "name": "Splunk Splunk Enterprise 6.0.12", "product": { "name": "Splunk Splunk Enterprise 6.0.12", "product_id": "T008032", "product_identification_helper": { "cpe": "cpe:/a:splunk:splunk:6.0.12" } } }, { "category": "product_name", "name": "Splunk Splunk Enterprise 6.4.2", "product": { "name": "Splunk Splunk Enterprise 6.4.2", "product_id": "T008033", "product_identification_helper": { "cpe": "cpe:/a:splunk:splunk:6.4.2" } } }, { "category": "product_name", "name": "Splunk Splunk Enterprise 6.1.11", "product": { "name": "Splunk Splunk Enterprise 6.1.11", "product_id": "T008034", "product_identification_helper": { "cpe": "cpe:/a:splunk:splunk:6.1.11" } } } ], "category": "product_name", "name": "Splunk Enterprise" } ], "category": "vendor", "name": "Splunk" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu Linux 12.04 LTS", "product": { "name": "Ubuntu Linux 12.04 LTS", "product_id": "307702", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~" } } }, { "category": "product_name", "name": "Ubuntu Linux 14.04 LTS", "product": { "name": "Ubuntu Linux 14.04 LTS", "product_id": "308878", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~" } } }, { "category": "product_name", "name": "Ubuntu Linux 16.04 LTS", "product": { "name": "Ubuntu Linux 16.04 LTS", "product_id": "T007521", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:16.04_lts" } } }, { "category": "product_name", "name": "Ubuntu Linux 15.10", "product": { "name": "Ubuntu Linux 15.10", "product_id": "T007522", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:15.10" } } } ], "category": "product_name", "name": "Linux" } ], "category": "vendor", "name": "Ubuntu" }, { "branches": [ { "category": "product_name", "name": "Blue Coat Director 6.1", "product": { "name": "Blue Coat Director 6.1", "product_id": "T006616", "product_identification_helper": { "cpe": "cpe:/a:bluecoat:director:6.1" } } }, { "category": "product_name", "name": "Blue Coat ProxyAV 3.5", "product": { "name": "Blue Coat ProxyAV 3.5", "product_id": "T003290", "product_identification_helper": { "cpe": "cpe:/h:bluecoat:proxyav:3.5" } } }, { "branches": [ { "category": "product_name", "name": "Blue Coat ProxySG 6.6", "product": { "name": "Blue Coat ProxySG 6.6", "product_id": "T006617", "product_identification_helper": { "cpe": "cpe:/h:bluecoat:proxysg:6.6" } } }, { "category": "product_name", "name": "Blue Coat ProxySG 6.5", "product": { "name": "Blue Coat ProxySG 6.5", "product_id": "T006618", "product_identification_helper": { "cpe": "cpe:/h:bluecoat:proxysg:6.5" } } } ], "category": "product_name", "name": "proxysg" } ], "category": "vendor", "name": "bluecoat" }, { "branches": [ { "category": "product_name", "name": "Cisco Digital Media Manager", "product": { "name": "Cisco Digital Media Manager", "product_id": "201470", "product_identification_helper": { "cpe": "cpe:/a:cisco:digital_media_manager:-" } } }, { "category": "product_name", "name": "Cisco Digital Media Player", "product": { "name": "Cisco Digital Media Player", "product_id": "T003265", "product_identification_helper": { "cpe": "cpe:/a:cisco:digital_media_player:-" } } }, { "category": "product_name", "name": "Cisco IronPort Encryption Appliance", "product": { "name": "Cisco IronPort Encryption Appliance", "product_id": "T003255", "product_identification_helper": { "cpe": "cpe:/a:cisco:ironport_encryption_appliance:-" } } }, { "category": "product_name", "name": "Cisco Nexus 1000V", "product": { "name": "Cisco Nexus 1000V", "product_id": "T003262", "product_identification_helper": { "cpe": "cpe:/h:cisco:nexus_1000v:-" } } }, { "category": "product_name", "name": "Cisco Prime Security Manager (PRSM)", "product": { "name": "Cisco Prime Security Manager (PRSM)", "product_id": "T006971", "product_identification_helper": { "cpe": "cpe:/a:cisco:prime_security_manager:9.3.1.1:112" } } }, { "category": "product_name", "name": "Cisco TelePresence Server", "product": { "name": "Cisco TelePresence Server", "product_id": "T001271", "product_identification_helper": { "cpe": "cpe:/a:cisco:telepresence_server:-" } } } ], "category": "vendor", "name": "cisco" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "F5 BIG-IP Analytics 11.2.1 - 11.6.0", "product": { "name": "F5 BIG-IP Analytics 11.2.1 - 11.6.0", "product_id": "317319", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_analytics:11.6.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Analytics 12.0.0", "product": { "name": "F5 BIG-IP Analytics 12.0.0", "product_id": "318563", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_analytics:12.0.0" } } } ], "category": "product_name", "name": "big-ip_analytics" }, { "branches": [ { "category": "product_name", "name": "F5 BIG-IP Application Security Manager 11.2.1 - 11.6.0", "product": { "name": "F5 BIG-IP Application Security Manager 11.2.1 - 11.6.0", "product_id": "317301", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_application_security_manager:11.6.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Application Security Manager 12.0.0", "product": { "name": "F5 BIG-IP Application Security Manager 12.0.0", "product_id": "318544", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_application_security_manager:12.0.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Application Security Manager 10.2.1 - 10.2.4", "product": { "name": "F5 BIG-IP Application Security Manager 10.2.1 - 10.2.4", "product_id": "329021", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_application_security_manager:10.2.4" } } } ], "category": "product_name", "name": "big-ip_application_security_manager" }, { "category": "product_name", "name": "F5 BIG-IP Edge Gateway 10.2.1 - 10.2.4", "product": { "name": "F5 BIG-IP Edge Gateway 10.2.1 - 10.2.4", "product_id": "241405", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_edge_gateway:10.2.4" } } }, { "branches": [ { "category": "product_name", "name": "F5 BIG-IP Global Traffic Manager 11.2.1 - 11.6.0", "product": { "name": "F5 BIG-IP Global Traffic Manager 11.2.1 - 11.6.0", "product_id": "317327", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_global_traffic_manager:11.6.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Global Traffic Manager 10.2.1 - 10.2.4", "product": { "name": "F5 BIG-IP Global Traffic Manager 10.2.1 - 10.2.4", "product_id": "329023", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_global_traffic_manager:10.2.4" } } }, { "category": "product_name", "name": "F5 BIG-IP Global Traffic Manager 12.0.0", "product": { "name": "F5 BIG-IP Global Traffic Manager 12.0.0", "product_id": "T007539", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_global_traffic_manager:12.0.0" } } } ], "category": "product_name", "name": "big-ip_global_traffic_manager" }, { "branches": [ { "category": "product_name", "name": "F5 BIG-IP Link Controller 11.2.1 - 11.6.0", "product": { "name": "F5 BIG-IP Link Controller 11.2.1 - 11.6.0", "product_id": "317308", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_link_controller:11.6.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Link Controller 12.0.0", "product": { "name": "F5 BIG-IP Link Controller 12.0.0", "product_id": "318586", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_link_controller:12.0.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Link Controller 10.2.1 - 10.2.4", "product": { "name": "F5 BIG-IP Link Controller 10.2.1 - 10.2.4", "product_id": "328977", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_link_controller:10.2.4" } } } ], "category": "product_name", "name": "big-ip_link_controller" }, { "branches": [ { "category": "product_name", "name": "F5 BIG-IP Local Traffic Manager 11.2.1 - 11.6.0", "product": { "name": "F5 BIG-IP Local Traffic Manager 11.2.1 - 11.6.0", "product_id": "317310", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_local_traffic_manager:11.6.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Local Traffic Manager 12.0.0", "product": { "name": "F5 BIG-IP Local Traffic Manager 12.0.0", "product_id": "318541", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_local_traffic_manager:12.0.0" } } }, { "category": "product_name", "name": "F5 BIG-IP Local Traffic Manager 10.2.1 - 10.2.4", "product": { "name": "F5 BIG-IP Local Traffic Manager 10.2.1 - 10.2.4", "product_id": "328984", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_local_traffic_manager:10.2.4" } } } ], "category": "product_name", "name": "big-ip_local_traffic_manager" }, { "category": "product_name", "name": "F5 WAN Optimization Manager 10.2.1 - 10.2.4", "product": { "name": "F5 WAN Optimization Manager 10.2.1 - 10.2.4", "product_id": "T005281", "product_identification_helper": { "cpe": "cpe:/a:f5:big-ip_wan_optimization_manager:10.1.0_-_10.2.4" } } }, { "category": "product_name", "name": "F5 WebAccelerator 10.2.1 - 10.2.4", "product": { "name": "F5 WebAccelerator 10.2.1 - 10.2.4", "product_id": "T001411", "product_identification_helper": { "cpe": "cpe:/h:f5:big-ip_webaccelerator:10.2.4" } } }, { "branches": [ { "category": "product_name", "name": "F5 BIG-IP Protocol Security Manager 11.4.0 - 11.4.1", "product": { "name": "F5 BIG-IP Protocol Security Manager 11.4.0 - 11.4.1", "product_id": "T003110", "product_identification_helper": { "cpe": "cpe:/a:f5:protocol_security_manager:11.4.1" } } }, { "category": "product_name", "name": "F5 BIG-IP Protocol Security Manager 10.2.1 - 10.2.4", "product": { "name": "F5 BIG-IP Protocol Security Manager 10.2.1 - 10.2.4", "product_id": "T003111", "product_identification_helper": { "cpe": "cpe:/a:f5:protocol_security_manager:10.2.4" } } } ], "category": "product_name", "name": "protocol_security_manager" } ], "category": "vendor", "name": "f5" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop 5", "product": { "name": "Red Hat Enterprise Linux Desktop 5", "product_id": "T000180", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_desktop:5" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop 6", "product": { "name": "Red Hat Enterprise Linux Desktop 6", "product_id": "T000222", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_desktop:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop 7", "product": { "name": "Red Hat Enterprise Linux Desktop 7", "product_id": "T003548", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_desktop:7" } } } ], "category": "product_name", "name": "enterprise_linux_desktop" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node 6", "product": { "name": "Red Hat Enterprise Linux HPC Node 6", "product_id": "T000395", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node 7", "product": { "name": "Red Hat Enterprise Linux HPC Node 7", "product_id": "T003549", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux HPC Node 7.2 EUS", "product": { "name": "Red Hat Enterprise Linux HPC Node 7.2 EUS", "product_id": "T007069", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_hpc_node:7.2:eus" } } } ], "category": "product_name", "name": "enterprise_linux_hpc_node" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation 6", "product": { "name": "Red Hat Enterprise Linux Workstation 6", "product_id": "T000396", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_workstation:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation 5", "product": { "name": "Red Hat Enterprise Linux Workstation 5", "product_id": "T000622", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_workstation:5" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation 7", "product": { "name": "Red Hat Enterprise Linux Workstation 7", "product_id": "T003565", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux_workstation:7" } } } ], "category": "product_name", "name": "enterprise_linux_workstation" } ], "category": "vendor", "name": "redhat" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12", "product": { "name": "SUSE Linux Enterprise Desktop 12", "product_id": "332016", "product_identification_helper": { "cpe": "cpe:/o:suse:linux_enterprise_desktop:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12 SP1", "product": { "name": "SUSE Linux Enterprise Desktop 12 SP1", "product_id": "T006804", "product_identification_helper": { "cpe": "cpe:/o:suse:linux_enterprise_desktop:12:sp1" } } } ], "category": "product_name", "name": "linux_enterprise_desktop" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 10 SP4 LTSS", "product": { "name": "SUSE Linux Enterprise Server 10 SP4 LTSS", "product_id": "T002668", "product_identification_helper": { "cpe": "cpe:/o:suse:linux_enterprise_server:10:sp4:ltss" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 11", "product": { "name": "SUSE Linux Enterprise Server 11", "product_id": "T005157", "product_identification_helper": { "cpe": "cpe:/o:suse:linux_enterprise_server:11" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 11 SP2 LTSS", "product": { "name": "SUSE Linux Enterprise Server 11 SP2 LTSS", "product_id": "T005896", "product_identification_helper": { "cpe": "cpe:/o:suse:linux_enterprise_server:11-sp2-ltss" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 11 SP3 LTSS", "product": { "name": "SUSE Linux Enterprise Server 11 SP3 LTSS", "product_id": "T007158", "product_identification_helper": { "cpe": "cpe:/o:suse:linux_enterprise_server:11:sp3:ltss" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 11 SP4", "product": { "name": "SUSE Linux Enterprise Server 11 SP4", "product_id": "T007322", "product_identification_helper": { "cpe": "cpe:/o:suse:linux_enterprise_server:11:sp4" } } } ], "category": "product_name", "name": "linux_enterprise_server" } ], "category": "vendor", "name": "suse" } ] }, "vulnerabilities": [ { "cve": "CVE-2016-2105", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in OpenSSL in den Funktionen \"EVP_EncodeUpdate\" und \"EVP_EncryptUpdate()\". Die Schwachstelle beruht darauf, dass die Eingabedaten in den Funktionen nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft werden. Ein entfernter, anonymer Angreifer kann dadurch einen \u00dcberlauf verursachen und somit einen Denial of Service Angriff durchf\u00fchren oder m\u00f6glicherweise beliebigen Programmcode ausf\u00fchren." } ], "product_status": { "known_affected": [ "T006971", "T001160", "T003264", "T003265", "T007069", "T003343", "T009408", "T008638", "T006616", "T010154", "T003426", "T003548", "317310", "T006618", "T003549", "T005209", "T006617", "318563", "T004914", "317308", "T000756", "329023", "329021", "5930", "T008032", "T000396", "T005281", "T000395", "T003261", "T008033", "T003262", "T008034", "T001271", "T000180", "T003255", "T005157", "T007218", "74289", "T007539", "T006804", "317327", "2040", "2084", "T032354", "332016", "317319", "2951", "T002207", "T000622", "T000222", "T000343", "T003290", "T007522", "T007127", "T009106", "T007322", "T007521", "T003565", "4035", "T006910", "318544", "318586", "318541", "T001069", "T007880", "T003110", "T003550", "T003111", "328977", "T007158", "T005896", "317301", "2142", "T002668", "241405", "201470", "T001411", "307702", "308878", "328984" ], "last_affected": [ "T006486" ] }, "release_date": "2016-05-03T22:00:00Z", "title": "CVE-2016-2105" }, { "cve": "CVE-2016-2106", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in OpenSSL in den Funktionen \"EVP_EncodeUpdate\" und \"EVP_EncryptUpdate()\". Die Schwachstelle beruht darauf, dass die Eingabedaten in den Funktionen nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft werden. Ein entfernter, anonymer Angreifer kann dadurch einen \u00dcberlauf verursachen und somit einen Denial of Service Angriff durchf\u00fchren oder m\u00f6glicherweise beliebigen Programmcode ausf\u00fchren." } ], "product_status": { "known_affected": [ "T006971", "T001160", "T003264", "T003265", "T007069", "T003343", "T009408", "T008638", "T006616", "T010154", "T003426", "T003548", "317310", "T006618", "T003549", "T005209", "T006617", "318563", "T004914", "317308", "T000756", "329023", "329021", "5930", "T008032", "T000396", "T005281", "T000395", "T003261", "T008033", "T003262", "T008034", "T001271", "T000180", "T003255", "T005157", "T007218", "74289", "T007539", "T006804", "317327", "2040", "2084", "T032354", "332016", "317319", "2951", "T002207", "T000622", "T000222", "T000343", "T003290", "T007522", "T007127", "T009106", "T007322", "T007521", "T003565", "4035", "T006910", "318544", "318586", "318541", "T001069", "T007880", "T003110", "T003550", "T003111", "328977", "T007158", "T005896", "317301", "2142", "T002668", "241405", "201470", "T001411", "307702", "308878", "328984" ], "last_affected": [ "T006486" ] }, "release_date": "2016-05-03T22:00:00Z", "title": "CVE-2016-2106" }, { "cve": "CVE-2016-2107", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in OpenSSL. Diese Schwachstelle beruht auf eine fehlerhafte Implementierung der \"Padding\" \u00dcberpr\u00fcfung. Ein Man-in-the-Middle (MitM) kann diese Schwachstelle f\u00fcr einen \"Padding Oracle\"-Angriff ausnutzen, um den Netzwerkverkehr zu entschl\u00fcsseln, wenn die Verbindung AES-CBC-Chiffren verwendet und der Server den Befehlssatz AES unterst\u00fctzt. Ein entfernter, anonymer Angreifer kann dadurch Sicherheitsvorkehrungen umgehen." } ], "product_status": { "known_affected": [ "T006971", "T001160", "T003264", "T003265", "T007069", "T009408", "T008638", "T006616", "T010154", "T003426", "T003548", "317310", "T006618", "T003549", "T005209", "T006617", "318563", "T004914", "317308", "T000756", "329023", "329021", "T008032", "T000396", "T005281", "T000395", "T003261", "T008033", "T003262", "T008034", "T001271", "T000180", "T003255", "T005157", "T007218", "74289", "T007539", "T006804", "317327", "2040", "2084", "T032354", "332016", "317319", "2951", "T002207", "T000622", "T000222", "T000343", "T003290", "T007522", "T007127", "T009106", "T007322", "T007521", "T003565", "4035", "T006910", "318544", "318586", "318541", "T001069", "T007880", "T003110", "T003550", "T003111", "328977", "T007158", "T005896", "317301", "2142", "T002668", "241405", "201470", "T001411", "307702", "308878", "328984" ], "last_affected": [ "T006486" ] }, "release_date": "2016-05-03T22:00:00Z", "title": "CVE-2016-2107" }, { "cve": "CVE-2016-2108", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in OpenSSL im Zusammenhang mit ASN.1 (Abstract Syntax Notation One). Diese Schwachstellen beruhen darauf, dass die ASN.1-Daten nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft und verarbeitet werden. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service-Angriff durchzuf\u00fchren, beliebigen Programmcode auf dem System auszuf\u00fchren oder sensible Informationen auszusp\u00e4hen." } ], "product_status": { "known_affected": [ "T006971", "T001160", "T003264", "T003265", "T007069", "T003343", "T009408", "T008638", "T006616", "T010154", "T003426", "T003548", "317310", "T006618", "T003549", "T005209", "T006617", "318563", "T004914", "317308", "T000756", "329023", "329021", "T008032", "T000396", "T005281", "T000395", "T003261", "T008033", "T003262", "T008034", "T001271", "T000180", "T003255", "T005157", "T007218", "74289", "T007539", "T006804", "317327", "2040", "2084", "T032354", "332016", "317319", "2951", "T002207", "T000622", "T000222", "T000343", "T003290", "T007522", "T007127", "T009106", "T007322", "T007521", "T003565", "4035", "T006910", "318544", "318586", "318541", "T001069", "T007880", "T003110", "T003550", "T003111", "328977", "T007158", "T005896", "317301", "2142", "T002668", "241405", "201470", "T001411", "307702", "308878", "328984" ], "last_affected": [ "T006486" ] }, "release_date": "2016-05-03T22:00:00Z", "title": "CVE-2016-2108" }, { "cve": "CVE-2016-2109", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in OpenSSL im Zusammenhang mit ASN.1 (Abstract Syntax Notation One). Diese Schwachstellen beruhen darauf, dass die ASN.1-Daten nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft und verarbeitet werden. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service-Angriff durchzuf\u00fchren, beliebigen Programmcode auf dem System auszuf\u00fchren oder sensible Informationen auszusp\u00e4hen." } ], "product_status": { "known_affected": [ "T006971", "T001160", "T003264", "T003265", "T007069", "T003343", "T009408", "T008638", "T006616", "T010154", "T003426", "T003548", "317310", "T006618", "T003549", "T005209", "T006617", "318563", "T004914", "317308", "T000756", "329023", "329021", "T008032", "T000396", "T005281", "T000395", "T003261", "T008033", "T003262", "T008034", "T001271", "T000180", "T003255", "T005157", "T007218", "74289", "T007539", "T006804", "317327", "2040", "2084", "T032354", "332016", "317319", "2951", "T002207", "T000622", "T000222", "T000343", "T003290", "T007522", "T007127", "T009106", "T007322", "T007521", "T003565", "4035", "T006910", "318544", "318586", "318541", "T001069", "T007880", "T003110", "T003550", "T003111", "328977", "T007158", "T005896", "317301", "2142", "T002668", "241405", "201470", "T001411", "307702", "308878", "328984" ], "last_affected": [ "T006486" ] }, "release_date": "2016-05-03T22:00:00Z", "title": "CVE-2016-2109" }, { "cve": "CVE-2016-2176", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in OpenSSL im Zusammenhang mit ASN.1 (Abstract Syntax Notation One). Diese Schwachstellen beruhen darauf, dass die ASN.1-Daten nicht ordnungsgem\u00e4\u00df \u00fcberpr\u00fcft und verarbeitet werden. Ein entfernter anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service-Angriff durchzuf\u00fchren, beliebigen Programmcode auf dem System auszuf\u00fchren oder sensible Informationen auszusp\u00e4hen." } ], "product_status": { "known_affected": [ "T006971", "T001160", "T003264", "T003265", "T007069", "T003343", "T009408", "T008638", "T006616", "T010154", "T003426", "T003548", "317310", "T006618", "T003549", "T005209", "T006617", "318563", "T004914", "317308", "T000756", "329023", "329021", "T008032", "T000396", "T005281", "T000395", "T003261", "T008033", "T003262", "T008034", "T001271", "T000180", "T003255", "T005157", "T007218", "74289", "T007539", "T006804", "317327", "2040", "2084", "T032354", "332016", "317319", "2951", "T002207", "T000622", "T000222", "T000343", "T003290", "T007522", "T007127", "T009106", "T007322", "T007521", "T003565", "4035", "T006910", "318544", "318586", "318541", "T001069", "T007880", "T003110", "T003550", "T003111", "328977", "T007158", "T005896", "317301", "2142", "T002668", "241405", "201470", "T001411", "307702", "308878", "328984" ], "last_affected": [ "T006486" ] }, "release_date": "2016-05-03T22:00:00Z", "title": "CVE-2016-2176" } ] }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.