The vulnerability of the fill-checking function in the AES-NI implementation of the OpenSSL library allows a perpetrator to gain unauthorized access to confidential data.

🗓️ 26 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Remote attacker can exploit the fill-checking function in AES-NI OpenSSL to access data

Reporter	Title	Published	Views	Family All 318
FreeBSD	OpenSSL -- multiple vulnerabilities	3 May 201600:00	–	freebsd
FreeBSD	OpenSSL -- multiple vulnerabilities	3 May 201600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL vulnerabilities affect IBM Tivoli Network Manager IP Edition 3.9 Fix Pack 4 - HTTPS support for Perl Collector install.	17 Jun 201815:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Security Identity Governance	16 Jun 201821:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere MQ (CVE-2016-2106, CVE-2016-2109)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Active Bypass (CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176)	16 Jun 201821:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways	8 Jun 202122:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Image Construction and Composition Tool (CVE-2016-2105, CVE-2016-2106, CVE-2016-2108, CVE-2016-2109)	15 Jun 201807:05	–	ibm

Vulners

Node

novell suse_openstack_cloudMatch5.0

novell suse_linux_enterprise_module_for_basesystemMatch15

novell suse_studio_onsiteMatch1.3

novell suse_linux_enterprise_module_for_legacy_softwareMatch15

novell suse_linux_enterprise_module_for_legacy_softwareMatch12

red_hat jboss_enterprise_application_platformMatch6.4

novell suse_managerMatch2.1

novell suse_manager_proxyMatch2.1

novell suse_linux_enterprise_module_for_containersMatch12

red_hat red_hat_jboss_enterprise_web_serverMatch2

red_hat red_hat_jboss_enterprise_web_serverMatch3

red_hat jboss_core_servicesMatch1

red_hat jboss_web_serverMatch2.1

novell suse_linux_enterprise_software_development_kitMatch12

openssl opensslRange≤1.0.2g

novell opensuseMatch13.1

novell suse_linux_enterprise_serverMatch12

red_hat red_hat_enterprise_linuxMatch6

red_hat red_hat_enterprise_linuxMatch7

fedora fedoraMatch22

fedora fedoraMatch23

novell opensuse_leapMatch42.2

novell opensuse_leapMatch42.3

novell opensuse_leapMatch42.1

novell opensuse_leapMatch15.0

novell suse_linux_enterprise_serverMatch11-security

novell suse_linux_enterprise_server_for_sap_applicationsMatch11-security

novell suse_linux_enterprise_server_for_sap_applicationsMatch12

novell suse_linux_enterprise_desktopMatch12

fedora fedoraMatch24

Source	Link
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html
access	www.access.redhat.com/security/cve/CVE-2016-2107
suse	www.suse.com/security/cve/CVE-2016-2107/
openssl	www.openssl.org/news/secadv/20160503.txt
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-2107
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-2107
web	www.web.nvd.nist.gov/view/vuln/detail

26 Jun 2020 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 25.4

CVSS 35.9

EPSS0.27261