Lucene search
JurajsomorovskyH1:136986HistoryMay 07, 2016 - 4:35 p.m.
Internet Bug Bounty: Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
2016-05-0716:35:28
jurajsomorovsky
hackerone.com
44
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.973 High
EPSS
Percentile
99.8%
Advisory: https://www.openssl.org/news/secadv/20160503.txt
Writeup (Referencing a proof of concept): http://web-in-security.blogspot.de/2016/05/curious-padding-oracle-in-openssl-cve.html
Related
ibm
ibm
redhatcve
redhatcve
CVE-2016-2107
2016-05-03 14:48:50
hackerone
hackerone
seebug
seebug
OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
2016-05-04 00:00:00
threatpost
threatpost
OpenSSL Patches Padding Oracle Attack Bug
2016-05-03 12:17:47
nessus
nessus
OpenSSL AES-NI Padding Oracle MitM Information Disclosure
2016-06-13 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K93600123)
2016-11-21 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Padding Oracle Information Disclosure (CVE-2016-2107)
2016-05-09 00:00:00
zdt
zdt
OpenSSL - Padding Oracle in AES-NI CBC MAC Check
2016-05-04 00:00:00
openvas
openvas
SSL/TLS: OpenSSL 'CVE-2016-2107' Padding Oracle Vulnerability
2017-03-30 00:00:00
Fedora Update for openssl FEDORA-2016-1
2016-05-11 00:00:00
Fedora Update for openssl FEDORA-2016-1411324654
2016-05-08 00:00:00
prion
prion
Design/Logic Flaw
2016-05-05 01:59:00
cve
cve
CVE-2016-2107
2016-05-05 01:59:00
ubuntucve
ubuntucve
CVE-2016-2107
2016-05-03 00:00:00
debiancve
debiancve
CVE-2016-2107
2016-05-05 01:59:00
veracode
veracode
Padding Oracle Attack
2017-01-27 03:10:31
thn
thn
High-Severity OpenSSL Vulnerability allows Hackers to Decrypt HTTPS Traffic
2016-05-04 23:31:00
f5
f5
K93600123 : OpenSSL vulnerability CVE-2016-2107
2016-05-07 00:00:00
SOL93600123 - OpenSSL vulnerability CVE-2016-2107
2016-05-06 00:00:00
K07538415 : Multiple OpenSSL vulnerabilities
2016-05-04 00:00:00
alpinelinux
alpinelinux
CVE-2016-2107
2016-05-05 01:59:00
kitploit
kitploit
yawast - The YAWAST Antecedent Web Application Security Toolkit
2016-10-16 14:12:00
citrix
citrix
Citrix XenServer 7.2 Multiple Security Updates
2018-03-29 04:00:00
Citrix XenServer Multiple Security Updates
2016-05-18 04:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2016-2107
2016-05-03 00:00:00
osv
osv
CVE-2016-2107
2016-05-05 01:59:00
openssl - security update
2016-05-03 00:00:00
openssl - security update
2016-05-03 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: openssl-1.0.2h-1.fc24
2016-05-07 12:15:14
[SECURITY] Fedora 23 Update: openssl-1.0.2h-1.fc23
2016-05-04 18:54:36
[SECURITY] Fedora 22 Update: openssl-1.0.1k-15.fc22
2016-05-10 17:58:11
mageia
mageia
Updated openssl packages fix security vulnerability
2016-05-08 00:22:48
paloalto
paloalto
OpenSSL Vulnerabilities
2016-09-02 00:00:00
suse
suse
Security update for openssl (important)
2016-05-05 13:11:19
Security update for openssl (important)
2016-05-05 18:08:51
Security update for openssl1 (important)
2016-05-03 22:08:22
ubuntu
ubuntu
OpenSSL vulnerabilities
2016-05-03 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:17.openssl
2016-05-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2h-alt1
2016-05-03 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2h-alt1
2016-05-03 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1
2016-05-04 00:00:00
amazon
amazon
Important: openssl
2016-05-03 10:30:00
cloudfoundry
cloudfoundry
USN-2959-1 OpenSSL vulnerabilities | Cloud Foundry
2016-05-06 00:00:00
nodejsblog
nodejsblog
OpenSSL updates, 1.0.1t and 1.0.2h
2016-05-02 00:00:00
slackware
slackware
[slackware-security] openssl
2016-05-03 21:05:31
debian
debian
[SECURITY] [DLA 456-1] openssl security update
2016-05-03 20:53:46
[SECURITY] [DSA 3566-1] openssl security update
2016-05-03 18:24:21
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2016-05-03 00:00:00
archlinux
archlinux
lib32-openssl: multiple issues
2016-05-04 00:00:00
openssl: multiple issues
2016-05-04 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016
2016-05-04 19:30:00
fortinet
fortinet
OpenSSL Advisory - May 2016
2016-09-22 00:00:00
huawei
huawei
Security Advisory - Multiple Vulnerabilities in OpenSSL in May 2016
2016-07-06 00:00:00
arista
arista
Security Advisory 0020
2016-05-06 00:00:00
centos
centos
openssl security update
2016-05-16 10:25:52
openssl security update
2016-05-09 08:40:50
redhat
redhat
(RHSA-2016:2073) Important: openssl security update
2016-10-18 06:21:20
(RHSA-2016:0722) Important: openssl security update
2016-05-09 04:44:04
(RHSA-2016:0996) Important: openssl security update
2016-05-10 07:00:21
symantec
symantec
SA123 : OpenSSL Vulnerabilities 3-May-2016
2016-05-09 08:00:00
oraclelinux
oraclelinux
openssl security update
2016-05-09 00:00:00
openssl security update
2016-05-13 00:00:00
openssl-fips security update
2016-06-15 00:00:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
0.973 High
EPSS
Percentile
99.8%
Related for H1:136986