The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssl< 1.0.2f-2openssl_1.0.2f-2_all.deb
Debian11allopenssl< 1.0.2f-2openssl_1.0.2f-2_all.deb
Debian10allopenssl< 1.0.2f-2openssl_1.0.2f-2_all.deb
Debian999allopenssl< 1.0.2f-2openssl_1.0.2f-2_all.deb
Debian13allopenssl< 1.0.2f-2openssl_1.0.2f-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssl	< 1.0.2f-2	openssl_1.0.2f-2_all.deb
Debian	11	all	openssl	< 1.0.2f-2	openssl_1.0.2f-2_all.deb
Debian	10	all	openssl	< 1.0.2f-2	openssl_1.0.2f-2_all.deb
Debian	999	all	openssl	< 1.0.2f-2	openssl_1.0.2f-2_all.deb
Debian	13	all	openssl	< 1.0.2f-2	openssl_1.0.2f-2_all.deb

openvas 22

nessus 28

f5 4

hackerone 1

intothesymmetry 3

veracode 1

openssl 3

ubuntucve 3

ubuntu 1

cve 3

fortinet 1

prion 3

ibm 68

nodejsblog 2

altlinux 8

freebsd 4

cisco 1

mageia 2

thn 1

fedora 1

cert 1

redhatcve 2

archlinux 5

openwrt 2

debiancve 2

osv 2

symantec 1

freebsd_advisory 1

alpinelinux 1

suse 3

amazon 2

gentoo 1

packetstorm 1

ics 1

oracle 7

openvas

OpenSSL 'Diffie-Hellman small subgroups' MitM Attack Vulnerability - Linux

2016-02-01 00:00:00

OpenSSL 'Diffie-Hellman small subgroups' MitM Attack Vulnerability - Windows

2016-02-01 00:00:00

Ubuntu: Security Advisory (USN-2883-1)

2016-02-05 00:00:00

nessus

Ubuntu 15.10 : openssl vulnerability (USN-2883-1)

2016-01-29 00:00:00

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2022-1663)

2022-05-06 00:00:00

OpenSSL 1.0.2 < 1.0.2zc-dev Vulnerability

2022-01-29 00:00:00

SOL64009378 - OpenSSL vulnerability CVE-2016-0701

2016-01-28 00:00:00

K64009378 : OpenSSL vulnerability CVE-2016-0701

2016-01-29 00:00:00

K30184101 : OpenSSL Vulnerability CVE-2021-4160

2022-03-31 00:00:00

hackerone

Internet Bug Bounty: OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)

2016-01-28 16:56:21

intothesymmetry

The RFC 5114 saga

2016-10-20 12:16:00

The Curious Case of WebCrypto Diffie-Hellman on Firefox - Small Subgroups Key Recovery Attack on DH

2020-01-07 15:08:00

OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)

2016-01-29 05:19:00

veracode

Unsafe Number Generation

2017-02-06 03:20:38

openssl

Vulnerability in OpenSSL CVE-2016-0701

2016-01-28 00:00:00

Vulnerability in OpenSSL CVE-2021-4160

2022-01-28 00:00:00

Vulnerability in OpenSSL CVE-2017-3738

2017-12-07 00:00:00

ubuntucve

CVE-2016-0701

2016-01-28 00:00:00

CVE-2021-4160

2022-01-28 00:00:00

CVE-2017-3738

2017-12-07 00:00:00

ubuntu

OpenSSL vulnerability

2016-01-28 00:00:00

cve

CVE-2016-0701

2016-02-15 02:59:00

CVE-2021-4160

2022-01-28 22:15:00

CVE-2017-3738

2017-12-07 16:29:00

fortinet

OpenSSL Advisory - January 2016

2016-07-12 00:00:00

prion

Design/Logic Flaw

2016-02-15 02:59:00

Design/Logic Flaw

2022-01-28 22:15:00

Buffer overflow

2017-12-07 16:29:00

ibm

Security Bulletin: OpenSSL 1.0.2 and 1.0.1 vulnerabilities (CVE-2016-0701 and CVE-2015-3197)

2018-12-08 04:55:34

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Image Construction and Composition Tool. (CVE-2016-0701, CVE-2015-3197)

2018-06-15 07:05:52

Security Bulletin: Vulnerabilities in OpenSSL affect Rational Application Developer for WebSphere Software (CVE-2016-0701, CVE-2015-3197)

2020-02-05 00:09:48

nodejsblog

OpenSSL upgrade low-severity Node.js security fixes

2016-01-27 00:00:00

February 2016 Security Release Summary

2016-02-09 00:00:00

altlinux

Security fix for the ALT Linux 7 package openssl10 version 1.0.1r-alt0.M70P.1

2016-01-28 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 1.0.2f-alt1

2016-01-28 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2f-alt1

2016-01-28 00:00:00

freebsd

OpenSSL -- BN_mod_exp incorrect results on MIPS

2022-01-28 00:00:00

openssl -- multiple vulnerabilities

2016-01-22 00:00:00

OpenSSL -- multiple vulnerabilities

2017-12-07 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL (January 2016) Affecting Cisco Products

2016-01-29 16:00:00

mageia

Updated openssl packages fix security vulnerabilities

2016-02-09 16:05:25

Updated openssl packages fix security vulnerabilities

2017-12-17 02:20:04

thn

Critical OpenSSL Flaw Allows Hackers to Decrypt HTTPS Traffic

2016-01-28 22:01:00

fedora

[SECURITY] Fedora 23 Update: openssl-1.0.2f-1.fc23

2016-01-30 18:23:36

cert

OpenSSL re-uses unsafe prime numbers in Diffie-Hellman protocol

2016-01-28 00:00:00

redhatcve

CVE-2021-4160

2022-01-31 17:57:31

CVE-2017-3738

2019-10-08 22:39:45

archlinux

[ASA-201804-6] lib32-openssl: private key recovery

2018-04-15 00:00:00

openssl: man-in-the-middle

2016-01-29 00:00:00

lib32-openssl: man-in-the-middle

2016-01-29 00:00:00

openwrt

openssl: Security update (2 CVEs)

2016-01-28 20:32:02

openssl: Security update (2 CVEs)

2016-01-29 15:48:20

debiancve

CVE-2021-4160

2022-01-28 22:15:00

CVE-2017-3738

2017-12-07 16:29:00

osv

CVE-2021-4160

2022-01-28 22:15:15

CVE-2017-3738

2017-12-07 16:29:00

symantec

SA111 : OpenSSL Vulnerabilities 28-Jan-2016

2016-02-18 08:00:00

freebsd_advisory

FreeBSD-SA-17:12.openssl

2017-12-09 00:00:00

alpinelinux

CVE-2017-3738

2017-12-07 16:29:00

suse

Security update for openssl (important)

2017-12-16 06:08:45

Security update for openssl (important)

2017-12-16 15:07:17

Security update for openssl (important)

2016-03-02 23:12:04

amazon

Medium: openssl

2018-05-10 17:29:00

Medium: openssl

2018-04-26 17:38:00

gentoo

OpenSSL: Multiple vulnerabilities

2016-01-29 00:00:00

packetstorm

Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle

2017-07-14 00:00:00

ics

Siemens SCALANCE X-200RNA Switch Devices

2022-12-19 12:00:00

oracle

Oracle Critical Patch Update - July 2016

2016-07-19 00:00:00

Oracle Critical Patch Update Advisory - July 2019

2019-07-16 00:00:00

Oracle Critical Patch Update - October 2017

2017-10-17 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.119 Low

EPSS

Percentile

95.2%

JSON

Related for DEBIANCVE:CVE-2016-0701