The vulnerability of the OpenSSL library, which allows a hacker to decrypt data

🗓️ 23 Mar 2016 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL vulnerability in SSLv2 get_client_master_key allows a remote attacker to decrypt TLS data.

Reporter	Title	Published	Views	Family All 165
IBM Security Bulletins	Security Bulletin: March 2016 OpenSSL Vulnerabilities affect Multiple N series Products	15 Dec 202118:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux	3 Aug 201804:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Sterling Connect:Express for Unix (CVE-2016-2842).	24 Jul 202022:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM i	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect Rational Software Architect and Rational Software Architect for WebSphere Software	10 Sep 202017:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilitiy in OpenSSL affect IBM Storwize V7000 Unified	18 Jun 201800:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Image Construction and Composition Tool. (CVE-2016-0705, CVE-2016-0798, CVE-2016-0797, CVE-2016-0799, CVE-2016-0702, and CVE-2016-0704)	15 Jun 201807:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM® SDK for Node.js™ in IBM Bluemix	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect WebSphere Message Broker and IBM Integration Bus	23 Mar 202020:41	–	ibm

Vulners

Node

openssl opensslRange<0.9.8zf

openssl opensslRange1.0.0–1.0.0r

openssl opensslRange1.0.1–1.0.1m

openssl opensslRange1.0.2–1.0.2a

Source	Link
git	www.git.openssl.org/
drownattack	www.drownattack.com/
openssl	www.openssl.org/news/secadv/20160301.txt
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3

EPSS0.06903