F5F5:K07538415K07538415 : Multiple OpenSSL vulnerabilities
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.973 High
EPSS
Percentile
99.9%
Security Advisory Description
On May 3, 2016, OpenSSL announced the discovery of the following vulnerabilities:
- CVE-2016-2105
- CVE-2016-2106
- CVE-2016-2107
- CVE-2016-2108
- CVE-2016-2109
- CVE-2016-2176
For the complete announcement from OpenSSL, refer to OpenSSL Security Advisory [3rd May 2016].
Note: This link takes you to a resource outside of AskF5. The third party could remove the document without our knowledge.
To locate relevant articles for the previously listed vulnerabilities, refer to the following table. F5 Technical Support has no additional information on these issues.
| Vulnerability | Article |
|---|---|
| CVE-2016-2105 | K51920288: OpenSSL vulnerability CVE-2016-2105 |
| CVE-2016-2106 | K36488941: OpenSSL vulnerability CVE-2016-2106 |
| CVE-2016-2107 | K93600123: OpenSSL vulnerability CVE-2016-2107 |
| CVE-2016-2108 | K75152412: OpenSSL vulnerability CVE-2016-2108 |
| CVE-2016-2109 | K23230229: OpenSSL vulnerability CVE-2016-2109 |
| CVE-2016-2176 | K47145213: OpenSSL vulnerability CVE-2016-2176 |
| F5 responds to vulnerabilities in accordance with the parameters defined in K4602: Overview of the F5 security vulnerability response policy. |
Note: This is a temporary index. When an article has been published for all of the CVEs listed in the previous table, this article may no longer be maintained, may be re-purposed, or may be archived without advanced notice.
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.5 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.973 High
EPSS
Percentile
99.9%