Lucene search
DadrianH1:138181HistoryMay 12, 2016 - 5:56 a.m.
Internet Bug Bounty: Bleichenbacher oracle in SSLv2 (CVE-2016-0704)
2016-05-1205:56:32
dadrian
hackerone.com
57
0.017 Low
EPSS
Percentile
87.8%
I’m retroactively submitting CVE-2016-0704, a.k.a. “Leaky Export”, which is a Bleichenbacher-style bug that leads to another variant of the Special DROWN attack. I’m submitting on behalf of myself and J. Alex Halderman, as we independently found this bug. This was validated by OpenSSL as Sev:Moderate at https://www.openssl.org/news/secadv/20160301.txt.
See https://drownattack.com for more information.
Related
veracode
veracode
Information Disclosure
2017-02-06 01:54:39
nessus
nessus
debiancve
debiancve
CVE-2016-0704
2016-03-02 11:59:01
openssl
openssl
Vulnerability in OpenSSL CVE-2016-0704
2016-03-01 00:00:00
cve
cve
CVE-2016-0704
2016-03-02 11:59:01
cvelist
cvelist
CVE-2016-0704
2016-03-02 00:00:00
ubuntucve
ubuntucve
CVE-2016-0704
2016-03-01 00:00:00
prion
prion
Buffer overflow
2016-03-02 11:59:00
openvas
openvas
OpenSSL Multiple Vulnerabilities -02 (Mar 2016) - Windows
2016-03-03 00:00:00
OpenSSL Multiple Vulnerabilities -02 (Mar 2016) - Linux
2016-03-03 00:00:00
F5 BIG-IP - OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704
2016-03-15 00:00:00
nvd
nvd
CVE-2016-0704
2016-03-02 11:59:01
paloalto
paloalto
OpenSSL Vulnerabilities
2016-10-18 00:00:00
f5
f5
SOL95463126 - OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704
2016-03-09 00:00:00
K95463126 : OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704
2016-03-10 00:00:00
checkpoint_advisories
checkpoint_advisories
redhat
redhat
(RHSA-2016:0372) Important: openssl098e security update
2016-03-09 00:00:00
(RHSA-2016:0303) Important: openssl security update
2016-03-01 00:00:00
(RHSA-2016:0304) Important: openssl security update
2016-03-01 00:00:00
ibm
ibm
amazon
amazon
Important: openssl098e
2016-04-06 14:40:00
centos
centos
openssl098e security update
2016-03-09 05:32:33
openssl security update
2015-04-14 11:25:52
openssl security update
2015-03-23 21:19:50
oraclelinux
oraclelinux
openssl098e security update
2016-03-09 00:00:00
suse
suse
Security update for openssl (important)
2016-03-11 14:14:22
Security update for openssl (important)
2016-03-03 15:11:31
Security update for compat-openssl097g (important)
2016-03-02 18:12:06
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-03-20 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:12.openssl
2016-03-10 00:00:00
freebsd
freebsd
FreeBSD -- Multiple OpenSSL vulnerabilities
2016-03-10 00:00:00
openwrt
openwrt
openssl: Security update (9 CVEs)
2016-03-01 16:52:09
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016
2016-03-02 12:30:00
arista
arista
Security Advisory 0018
2016-03-01 00:00:00
symantec
symantec
SA117 : OpenSSL Vulnerabilities 1-Mar-2016
2016-03-07 08:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00