ByteOS Network

Vulnerability Details :

CVE-2016-0704

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-02 Mar, 2016 | 00:00

Updated At-05 Aug, 2024 | 22:30

An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:02 Mar, 2016 | 00:00

Updated At:05 Aug, 2024 | 22:30

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html	vendor-advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc	vendor-advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html	vendor-advisory
http://www.securityfocus.com/bid/83764	vdb-entry
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html	vendor-advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168	N/A
https://drownattack.com	N/A
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97	N/A
http://openssl.org/news/secadv/20160301.txt	N/A
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html	vendor-advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html	vendor-advisory
https://www.openssl.org/news/secadv/20160301.txt	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html	vendor-advisory
https://security.gentoo.org/glsa/201603-15	vendor-advisory
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html	vendor-advisory
http://www.securitytracker.com/id/1035133	vdb-entry
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html	vendor-advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	N/A

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html

Resource:

vendor-advisory

Hyperlink: https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc

Resource:

vendor-advisory

Hyperlink: http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html

Resource:

vendor-advisory

Hyperlink: http://www.securityfocus.com/bid/83764

Resource:

vdb-entry

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html

Resource:

vendor-advisory

Hyperlink: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168

Resource: N/A

Hyperlink: https://drownattack.com

Resource: N/A

Hyperlink: https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97

Resource: N/A

Hyperlink: http://openssl.org/news/secadv/20160301.txt

Resource: N/A

Hyperlink: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html

Resource:

vendor-advisory

Hyperlink: https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html

Resource:

vendor-advisory

Hyperlink: https://www.openssl.org/news/secadv/20160301.txt

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html

Resource:

vendor-advisory

Hyperlink: https://security.gentoo.org/glsa/201603-15

Resource:

vendor-advisory

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html

Resource:

vendor-advisory

Hyperlink: http://www.securitytracker.com/id/1035133

Resource:

vdb-entry

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html

Resource:

vendor-advisory

Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Resource: N/A

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Resource: N/A

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html	vendor-advisory x_transferred
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc	vendor-advisory x_transferred
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html	vendor-advisory x_transferred
http://www.securityfocus.com/bid/83764	vdb-entry x_transferred
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html	vendor-advisory x_transferred
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168	x_transferred
https://drownattack.com	x_transferred
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97	x_transferred
http://openssl.org/news/secadv/20160301.txt	x_transferred
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html	vendor-advisory x_transferred
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us	x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html	vendor-advisory x_transferred
https://www.openssl.org/news/secadv/20160301.txt	x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html	vendor-advisory x_transferred
https://security.gentoo.org/glsa/201603-15	vendor-advisory x_transferred
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html	vendor-advisory x_transferred
http://www.securitytracker.com/id/1035133	vdb-entry x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html	vendor-advisory x_transferred
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	x_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	x_transferred

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Resource:

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html

Resource:

vendor-advisory

x_transferred

Hyperlink: https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc

Resource:

vendor-advisory

x_transferred

Hyperlink: http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Resource:

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://www.securityfocus.com/bid/83764

Resource:

vdb-entry

x_transferred

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Resource:

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html

Resource:

vendor-advisory

x_transferred

Hyperlink: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168

Resource:

x_transferred

Hyperlink: https://drownattack.com

Resource:

x_transferred

Hyperlink: https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97

Resource:

x_transferred

Hyperlink: http://openssl.org/news/secadv/20160301.txt

Resource:

x_transferred

Hyperlink: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl

Resource:

vendor-advisory

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html

Resource:

vendor-advisory

x_transferred

Hyperlink: https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us

Resource:

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html

Resource:

vendor-advisory

x_transferred

Hyperlink: https://www.openssl.org/news/secadv/20160301.txt

Resource:

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html

Resource:

vendor-advisory

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201603-15

Resource:

vendor-advisory

x_transferred

Hyperlink: http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html

Resource:

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://www.securitytracker.com/id/1035133

Resource:

vdb-entry

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Resource:

x_transferred

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Resource:

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:02 Mar, 2016 | 11:59

Updated At:12 Apr, 2025 | 10:46

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.0

Base score: 5.9

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:N/A:N

Hyperlink	Source	Resource
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html	secalert@redhat.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html	secalert@redhat.com	N/A
http://openssl.org/news/secadv/20160301.txt	secalert@redhat.com	Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl	secalert@redhat.com	N/A
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	secalert@redhat.com	N/A
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	secalert@redhat.com	N/A
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	secalert@redhat.com	N/A
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	secalert@redhat.com	N/A
http://www.securityfocus.com/bid/83764	secalert@redhat.com	N/A
http://www.securitytracker.com/id/1035133	secalert@redhat.com	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	secalert@redhat.com	N/A
https://drownattack.com	secalert@redhat.com	N/A
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97	secalert@redhat.com	N/A
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us	secalert@redhat.com	N/A
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168	secalert@redhat.com	N/A
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc	secalert@redhat.com	N/A
https://security.gentoo.org/glsa/201603-15	secalert@redhat.com	N/A
https://www.openssl.org/news/secadv/20160301.txt	secalert@redhat.com	N/A
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://openssl.org/news/secadv/20160301.txt	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/83764	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1035133	af854a3a-2127-422b-91ae-364da2661108	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A
https://drownattack.com	af854a3a-2127-422b-91ae-364da2661108	N/A
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97	af854a3a-2127-422b-91ae-364da2661108	N/A
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us	af854a3a-2127-422b-91ae-364da2661108	N/A
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.gentoo.org/glsa/201603-15	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.openssl.org/news/secadv/20160301.txt	af854a3a-2127-422b-91ae-364da2661108	N/A

CVE-2016-0704

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs