Lucene search

K
redhatcveRedhat.comRH:CVE-2016-2107
HistoryMay 03, 2016 - 2:48 p.m.

CVE-2016-2107

2016-05-0314:48:50
redhat.com
access.redhat.com
28

It was discovered that OpenSSL leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when the connection used the AES CBC cipher suite and the server supported AES-NI. A remote attacker could possibly use this flaw to retrieve plain text from encrypted packets by using a TLS/SSL or DTLS server as a padding oracle.