Lucene search
OpenSSLOPENSSL:CVE-2016-0704HistoryMar 01, 2016 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2016-0704
2016-03-0100:00:00
www.openssl.org
25
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
7.9 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.522 Medium
EPSS
Percentile
97.5%
This issue only affected versions of OpenSSL prior to March 19th 2015 at which time the code was refactored to address the vulnerability CVE-2015-0293. s2_srvr.c overwrite the wrong bytes in the master-key when applying Bleichenbacher protection for export cipher suites. This provides a Bleichenbacher oracle, and could potentially allow more efficient variants of the DROWN attack.
Related
nessus
nessus
Amazon Linux AMI : openssl098e (ALAS-2016-682) (DROWN)
2016-04-07 00:00:00
Scientific Linux Security Update : openssl098e on SL6.x, SL7.x i386/x86_64 (20160309) (DROWN)
2016-03-10 00:00:00
CentOS 6 / 7 : openssl098e (CESA-2016:0372) (DROWN)
2016-03-09 00:00:00
redhat
redhat
(RHSA-2016:0303) Important: openssl security update
2016-03-01 00:00:00
(RHSA-2016:0372) Important: openssl098e security update
2016-03-09 00:00:00
(RHSA-2016:0304) Important: openssl security update
2016-03-01 00:00:00
openvas
openvas
RedHat Update for openssl098e RHSA-2016:0372-01
2016-03-10 00:00:00
CentOS Update for openssl098e CESA-2016:0372 centos6
2016-03-10 00:00:00
CentOS Update for openssl098e CESA-2016:0372 centos7
2016-03-10 00:00:00
amazon
amazon
Important: openssl098e
2016-04-06 14:40:00
Medium: openssl
2015-03-23 13:42:00
veracode
veracode
Information Disclosure
2017-02-06 01:54:39
Denial Of Service (DoS)
2017-01-26 06:43:37
Denial Of Service (DoS)
2019-01-15 09:10:17
f5
f5
K16321 : OpenSSL vulnerability CVE-2015-0293
2015-10-05 00:00:00
SOL16321 - OpenSSL vulnerability CVE-2015-0293
2015-04-02 00:00:00
SOL95463126 - OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704
2016-03-09 00:00:00
debiancve
debiancve
CVE-2015-0293
2015-03-19 22:59:00
CVE-2016-0704
2016-03-02 11:59:00
openssl
openssl
Vulnerability in OpenSSL CVE-2015-0293
2015-03-19 00:00:00
Vulnerability in OpenSSL CVE-2016-0703
2016-03-01 00:00:00
centos
centos
openssl098e security update
2016-03-09 05:32:33
openssl security update
2015-04-14 11:25:52
openssl security update
2015-03-23 21:19:50
ubuntucve
ubuntucve
CVE-2015-0293
2015-03-17 00:00:00
CVE-2016-0704
2016-03-01 00:00:00
cve
cve
CVE-2015-0293
2015-03-19 22:59:00
CVE-2016-0704
2016-03-02 11:59:00
prion
prion
Design/Logic Flaw
2015-03-19 22:59:00
Buffer overflow
2016-03-02 11:59:00
hackerone
hackerone
Internet Bug Bounty: Bleichenbacher oracle in SSLv2 (CVE-2016-0704)
2016-05-12 05:56:32
oraclelinux
oraclelinux
openssl098e security update
2016-03-09 00:00:00
openssl security and bug fix update
2015-03-23 00:00:00
openssl security update
2015-03-23 00:00:00
suse
suse
Security update for openssl (important)
2016-03-11 14:14:22
Security update for openssl (important)
2016-03-03 15:11:31
Security update for compat-openssl097g (important)
2016-03-02 18:12:06
checkpoint_advisories
checkpoint_advisories
paloalto
paloalto
OpenSSL Vulnerabilities
2016-10-18 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in OpenSSL affect Rational ClearQuest (CVE-2015-0209, CVE-2015-0286, CVE-2015-0288, CVE-2015-0293)
2018-06-17 05:01:59
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-openssl-1.0.2a-1.fc22
2015-05-01 16:42:54
[SECURITY] Fedora 21 Update: mingw-openssl-1.0.2a-1.fc21
2015-05-04 15:27:35
[SECURITY] Fedora 22 Update: openssl-1.0.1k-6.fc22
2015-03-22 04:41:05
kitploit
kitploit
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.1k-alt2
2015-03-19 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1k-alt2
2015-03-19 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2015-03-19 19:47:16
slackware
slackware
[slackware-security] openssl
2015-04-22 01:22:19
osv
osv
openssl - security update
2015-03-20 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2015-03-19 00:00:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
7.9 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.522 Medium
EPSS
Percentile
97.5%
Related for OPENSSL:CVE-2016-0704