Lucene search

[email protected]CVE-2016-10259

HistoryApr 11, 2017 - 2:59 p.m.

CVE-2016-10259

2017-04-1114:59:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2016-10259

symantec

ssl visibility

sslv

denial-of-service

vulnerability

ssl server

tcp connection pool

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

JSON

Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.

Affected configurations

NVD

Node

bluecoatssl_visibility_appliance_sv1800_firmwareMatch3.8.4

bluecoatssl_visibility_appliance_sv1800_firmwareMatch3.9

bluecoatssl_visibility_appliance_sv1800_firmwareMatch3.10

bluecoatssl_visibility_appliance_sv1800_firmwareMatch3.11

bluecoatssl_visibility_appliance_sv1800_firmwareMatch3.11.1.1

bluecoatssl_visibility_appliance_sv1800_firmwareMatch3.11.1.2

bluecoatssl_visibility_appliance_sv1800_firmwareMatch3.11.2.1

AND

bluecoatssl_visibility_appliance_sv1800Match-

Node

bluecoatssl_visibility_appliance_sv800_firmwareMatch3.8.4

bluecoatssl_visibility_appliance_sv800_firmwareMatch3.9

bluecoatssl_visibility_appliance_sv800_firmwareMatch3.10

bluecoatssl_visibility_appliance_sv800_firmwareMatch3.11

bluecoatssl_visibility_appliance_sv800_firmwareMatch3.11.1.1

bluecoatssl_visibility_appliance_sv800_firmwareMatch3.11.1.2

bluecoatssl_visibility_appliance_sv800_firmwareMatch3.11.2.1

AND

bluecoatssl_visibility_appliance_sv800Match-

Node

bluecoatssl_visibility_appliance_sv3800_firmwareMatch3.8.4

bluecoatssl_visibility_appliance_sv3800_firmwareMatch3.9

bluecoatssl_visibility_appliance_sv3800_firmwareMatch3.10

bluecoatssl_visibility_appliance_sv3800_firmwareMatch3.11

bluecoatssl_visibility_appliance_sv3800_firmwareMatch3.11.1.1

bluecoatssl_visibility_appliance_sv3800_firmwareMatch3.11.1.2

bluecoatssl_visibility_appliance_sv3800_firmwareMatch3.11.2.1

AND

bluecoatssl_visibility_appliance_sv3800Match-

Node

bluecoatssl_visibility_appliance_sv2800_firmwareMatch3.8.4

bluecoatssl_visibility_appliance_sv2800_firmwareMatch3.9

bluecoatssl_visibility_appliance_sv2800_firmwareMatch3.10

bluecoatssl_visibility_appliance_sv2800_firmwareMatch3.11

bluecoatssl_visibility_appliance_sv2800_firmwareMatch3.11.1.1

bluecoatssl_visibility_appliance_sv2800_firmwareMatch3.11.1.2

bluecoatssl_visibility_appliance_sv2800_firmwareMatch3.11.2.1

AND

bluecoatssl_visibility_appliance_sv2800Match-

CPENameOperatorVersion
bluecoat:ssl_visibility_appliance_sv1800_firmwarebluecoat ssl visibility appliance sv1800 firmwareeq3.8.4
bluecoat:ssl_visibility_appliance_sv1800_firmwarebluecoat ssl visibility appliance sv1800 firmwareeq3.9
bluecoat:ssl_visibility_appliance_sv1800_firmwarebluecoat ssl visibility appliance sv1800 firmwareeq3.10
bluecoat:ssl_visibility_appliance_sv1800_firmwarebluecoat ssl visibility appliance sv1800 firmwareeq3.11
bluecoat:ssl_visibility_appliance_sv1800_firmwarebluecoat ssl visibility appliance sv1800 firmwareeq3.11.1.1
bluecoat:ssl_visibility_appliance_sv1800_firmwarebluecoat ssl visibility appliance sv1800 firmwareeq3.11.1.2
bluecoat:ssl_visibility_appliance_sv1800_firmwarebluecoat ssl visibility appliance sv1800 firmwareeq3.11.2.1

CPE	Name	Operator	Version
bluecoat:ssl_visibility_appliance_sv1800_firmware	bluecoat ssl visibility appliance sv1800 firmware	eq	3.8.4
bluecoat:ssl_visibility_appliance_sv1800_firmware	bluecoat ssl visibility appliance sv1800 firmware	eq	3.9
bluecoat:ssl_visibility_appliance_sv1800_firmware	bluecoat ssl visibility appliance sv1800 firmware	eq	3.10
bluecoat:ssl_visibility_appliance_sv1800_firmware	bluecoat ssl visibility appliance sv1800 firmware	eq	3.11
bluecoat:ssl_visibility_appliance_sv1800_firmware	bluecoat ssl visibility appliance sv1800 firmware	eq	3.11.1.1
bluecoat:ssl_visibility_appliance_sv1800_firmware	bluecoat ssl visibility appliance sv1800 firmware	eq	3.11.1.2
bluecoat:ssl_visibility_appliance_sv1800_firmware	bluecoat ssl visibility appliance sv1800 firmware	eq	3.11.2.1

CNA Affected

[
  {
    "product": "SSL Visibility",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "3.8.4FC, 3.9, 3.10 prior to 3.10.4.1, and 3.11 prior to 3.11.3.1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/97525

bto.bluecoat.com/security-advisory/sa142

www.symantec.com/security-center/network-protection-security-advisories/SA142

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for CVE-2016-10259

prion1 symantec1 jvn1 cvelist1 nvd1