Lucene search
F5F5:K30215094HistoryMar 02, 2017 - 12:00 a.m.
K30215094 : Ruby vulnerability CVE-2016-7798
2017-03-0200:00:00
my.f5.com
15
Security Advisory Description
The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism. (CVE-2016-7798)
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
cve
cve
CVE-2016-7798
2017-01-30 22:59:00
nessus
nessus
Fedora 24 : ruby (2017-f16ba664e7)
2017-08-11 00:00:00
Amazon Linux AMI : ruby23 (ALAS-2017-880)
2017-09-01 00:00:00
EulerOS 2.0 SP3 : ruby (EulerOS-SA-2020-1432)
2020-04-15 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: ruby-2.3.3-62.fc25
2017-08-04 20:51:00
[SECURITY] Fedora 24 Update: ruby-2.3.3-62.fc24
2017-08-04 19:48:31
openvas
openvas
Fedora Update for ruby FEDORA-2017-f16ba664e7
2017-08-07 00:00:00
Mageia: Security Advisory (MGASA-2016-0342)
2022-01-28 00:00:00
Fedora Update for ruby FEDORA-2017-7faa3d2e78
2017-08-07 00:00:00
mageia
mageia
Updated ruby packages fix a security vulnerability
2016-10-13 10:20:57
nvd
nvd
CVE-2016-7798
2017-01-30 22:59:00
debiancve
debiancve
CVE-2016-7798
2017-01-30 22:59:00
osv
osv
OpenSSL gem for Ruby using inadequate encryption strength
2017-10-24 18:33:35
CVE-2016-7798
2017-01-30 22:59:00
ruby2.3 - security update
2017-09-05 00:00:00
cvelist
cvelist
CVE-2016-7798
2017-01-30 22:00:00
redhatcve
redhatcve
CVE-2016-7798
2016-10-04 11:47:20
amazon
amazon
Medium: ruby23
2017-08-31 15:57:00
github
github
OpenSSL gem for Ruby using inadequate encryption strength
2017-10-24 18:33:35
ubuntucve
ubuntucve
CVE-2016-7798
2017-01-30 00:00:00
cbl_mariner
cbl_mariner
CVE-2016-7798 affecting package openssl 1.1.1g-6
2021-08-11 06:39:26
prion
prion
Design/Logic Flaw
2017-01-30 22:59:00
debian
debian
[SECURITY] [DSA 3966-1] ruby2.3 security update
2017-09-05 20:17:58
[SECURITY] [DLA 1421-1] ruby2.1 security update
2018-07-14 06:28:37
ubuntu
ubuntu
Ruby vulnerabilities
2017-07-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1939
2021-07-02 17:38:47