OpenSSL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• Unscored —
  CVE-2016-0702 Public exploit

  The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2…

  openssl openssl Debian Ubuntu
  Mar 3, 2016
• Unscored —
  CVE-2016-0703

  The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0…

  openssl Debian
  Mar 2, 2016
• Unscored —
  CVE-2016-0704

  An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSS…

  openssl Debian
  Mar 2, 2016
• Unscored —
  CVE-2016-0705 EPSS 26%

  Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and …

  openssl openssl Debian Ubuntu
  Mar 3, 2016
• Unscored —
  CVE-2016-0797 EPSS 27%

  Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a den…

  openssl openssl Debian Ubuntu
  Mar 3, 2016
• Unscored —
  CVE-2016-0798 EPSS 24%

  Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows r…

  openssl openssl Debian Ubuntu
  Mar 3, 2016
• Unscored —
  CVE-2016-0799 EPSS 32%

  The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculate…

  openssl openssl Debian Ubuntu
  Mar 3, 2016
• Unscored —
  CVE-2016-0800 Public exploit EPSS 82%

  The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to s…

  openssl nss Debian
  Mar 1, 2016

Revision history

1. 2025-11-02 #73

   Neue Updates von F5 aufgenommen

2. 2025-01-14 #72

   Neue Updates von moxa aufgenommen

3. 2024-11-19 #71

   Neue Updates von moxa aufgenommen

4. 2024-11-03 #70

   Neue Updates von moxa aufgenommen

5. 2024-07-30 #69

   Neue Updates von moxa aufgenommen

6. 2023-11-02 #68

   Neue Updates von moxa aufgenommen

7. 2023-02-19 #67

   Neue Updates von IBM aufgenommen

8. 2022-04-10 #66

   Neue Updates von Oracle Linux aufgenommen

9. 2021-03-31 #65

   Neue Updates von Oracle Linux aufgenommen

10. 2020-06-23 #64

    Neue Updates von Pulse Secure aufgenommen

11. 2019-08-18 #63

    Neue Updates von Oracle Linux aufgenommen

12. 2019-03-13 #62

    Neue Updates von Oracle Linux aufgenommen

13. 2019-01-30 #61

    Neue Updates von EMC aufgenommen

14. 2018-09-24 #60

    New remediations available

15. 2018-08-27 #59

    New remediations available

16. 2018-08-23 #58

    Added references

17. 2017-05-21 #55

    New remediations available

18. 2017-05-21 #56

    Version nicht vorhanden

19. 2017-05-21 #57

    Version nicht vorhanden

20. 2017-02-19 #53

    New remediations available

21. 2017-02-19 #54

    Version nicht vorhanden

22. 2017-01-11 #52

    New remediations available

23. 2016-11-07 #51

    New remediations available

24. 2016-10-18 #50

    New remediations available

25. 2016-10-17 #48

    New remediations available

References

• OpenSSL Security Advisory vom 2016-03-01
  https://www.openssl.org/news/secadv/20160301.txt
• Ubuntu Security Notice USN-2914-1 vom 2016-03-01
  http://www.ubuntu.com/usn/usn-2914-1/
• Debian Security Advisory DSA-3500-1 openssl vom 2016-03-01
  https://www.debian.org/security/2016/dsa-3500
• Red Hat Security Advisory RHSA-2016:0305-1 vom 2016-03-01
  https://rhn.redhat.com/errata/RHSA-2016-0305.html
• Red Hat Security Advisory RHSA-2016:0302-1 vom 2016-03-01
  https://rhn.redhat.com/errata/RHSA-2016-0302.html
• Red Hat Security Advisory RHSA-2016:0301-1 vom 2016-03-01
  https://rhn.redhat.com/errata/RHSA-2016-0301.html
• Red Hat Security Advisory RHSA-2016:0304-1 vom 2016-03-01
  https://rhn.redhat.com/errata/RHSA-2016-0304.html
• Red Hat Security Advisory RHSA-2016:0303-1 vom 2016-03-01
  https://rhn.redhat.com/errata/RHSA-2016-0303.html
• Red Hat Security Advisory RHSA-2016:0306-1 vom 2016-03-01
  https://rhn.redhat.com/errata/RHSA-2016-0306.html
• SUSE Security Update SUSE-SU-2016:0631-1 vom 2016-03-02
  https://www.suse.com/support/update/announcement/2016/suse-su-20160631-1.html
• CISCO Security Advisory CISCO-SA-20160302-OPENSSL vom 2016-03-03
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
• SUSE Security Update Announcement ID SUSE-SU-2016:0641-1 Stand 2016-03-03
  https://www.suse.com/support/update/announcement/2016/suse-su-20160641-1.html
• Tenable AdvisoryID TNS-2016-03 Stand 2016-03-03
  http://www.tenable.com/security/tns-2016-03
• SUSE Security Update SUSE-SU-2016:0678-1 vom 2016-03-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20160678-1.html
• F5 Security Advisory SOL95463126 vom 2016-03-10
  https://support.f5.com/kb/en-us/solutions/public/k/95/sol95463126.html
• Red Hat Security Advisory RHSA-2016:0379 vom 2016-03-09
  https://rhn.redhat.com/errata/RHSA-2016-0379.html
• Red Hat Security Advisory RHSA-2016:0372 vom 2016-03-09 vom 2016-03-09
  https://rhn.redhat.com/errata/RHSA-2016-0372.html
• FreeBSD Security Advisory FREEBSD-SA-16:12.OPENSSL vom 2016-03-11
  https://security.freebsd.org/advisories/FreeBSD-SA-16:12.openssl.asc
• SUSE Security Update SUSE-SU-2016:0748-1 vom 2016-03-14
  https://www.suse.com/support/update/announcement/2016/suse-su-20160748-1.html
• Juniper Security Advisory JSA10722 vom 2016-03-15
  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722
• RedHat Security Advisory RHSA-2016-0445 vom 2016-03-14
  https://rhn.redhat.com/errata/RHSA-2016-0445.html
• RedHat Security Advisory RHSA-2016-0446
  https://rhn.redhat.com/errata/RHSA-2016-0446.html
• SUSE Security Update SUSE-SU-2016:0778-1 vom 2016-03-15
  https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html
• RedHat Security Advisory RHSA-2016-0490 vom 2016-03-22
  https://rhn.redhat.com/errata/RHSA-2016-0490.html
• F5 Security Advisory SOL79215841 vom 2016-03-24
  https://support.f5.com/kb/en-us/solutions/public/k/79/sol79215841.html
• Citrix Security Bulletin CTX208403 vom 2016-03-31
  http://support.citrix.com/article/CTX208403
• IBM SECURITY ADVISORY vom 2016-04-11
  http://aix.software.ibm.com/aix/efixes/security/openssl_advisory18.asc
• SUSE Security Update SUSE-SU-2016:1057-1 vom 2016-04-17
  https://www.suse.com/support/update/announcement/2016/suse-su-20161057-1.html
• HP Security Bulletin C05096953 vom 2016-04-22
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05096953
• F5 Security Advisory SOL52349521 vom 2016-04-28
  https://support.f5.com/kb/en-us/solutions/public/k/52/sol52349521.html
• SUSE Security Update SUSE-SU-2016:1267-1 vom 2016-05-09
  https://www.suse.com/support/update/announcement/2016/suse-su-20161267-1.html
• Red Hat Security Advisory RHSA-2016:0996-2 vom 2016-05-10
  https://rhn.redhat.com/errata/RHSA-2016-0996.html
• Red Hat Security Advisory RHSA-2016:0722-1 vom 2016-05-09
  https://rhn.redhat.com/errata/RHSA-2016-0722.html
• SUSE Security Update Announcement ID SUSE-SU-2016:1290-1 vom 2016-05-12
  http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html
• SUSE Security Update SUSE-SU-2016:1360-1 vom 2016-05-19
  https://www.suse.com/support/update/announcement/2016/suse-su-20161360-1.html
• Red Hat Security Advisory RHSA-2016:1519 vom 2016-07-28
  https://rhn.redhat.com/errata/RHSA-2016-1519.html
• F5 Security Advisory SOL22334603 vom 2016-03-25
  http://support.f5.com/kb/en-us/solutions/public/k/22/sol22334603.html
• Juniper Security Bulletin JSA10759 vom 2016-10-14
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759&cat=SIRT_1&actp=LIST
• RedHat Security Advisory RHSA-2016-2073
  https://rhn.redhat.com/errata/RHSA-2016-2073.html
• Red Hat Security Advisory RHSA-2016:2073 vom 2016-10-18
  https://access.redhat.com/errata/RHSA-2016:2073
• UNIFY Security Advisory Report - OBSO-1603-02
  https://networks.unify.com/security/advisories/OBSO-1603-02.pdf
• Juniper Security Advisory JSA10774 vom 2017-01-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774
• Juniper Security Advisory JSA10770 vom 2017-01-12
  http://www.auscert.org.au/render.html?it=42842
• NetApp Advisory NTAP-20160301-0001
  https://kb.netapp.com/support/s/article/ka51A00000007ACQAY/cve-2016-0800-sslv2-vulnerability-in-multiple-netapp-products?language=en_US
• Brocade Security Advisory BSA-2017-281 vom 2017-05-19
  http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-281.htm
• Red Hat Security Advisory RHSA-2018:2568 vom 2018-08-27
  http://rhn.redhat.com/errata/RHSA-2018-2568.html
• SUSE Security Update SUSE-SU-2018:2839-1 vom 2018-09-24
  https://www.suse.com/support/update/announcement/2018/suse-su-20182839-1.html
• Dell/EMC Knowledge Base Article: 000529947
  https://support.emc.com/kb/529947
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16
  http://linux.oracle.com/errata/ELSA-2019-4747.html
• Pulse Secure Security Advisory SA44073 vom 2020-06-23
  https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44073-2019-03-Security-Bulletin-Multiple-vulnerabilities-resolved-in-Pulse-Connect-Secure-Pulse-Policy-Secure-Pulse-Secure-Desktop-9-0R4-8-3R7/?kA23Z000000KBrjSAG=
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html
• IBM Security Bulletin 695683 vom 2023-02-20
  https://www.ibm.com/support/pages/node/695683
• Moxa Security Advisory MPSA-230203 vom 2023-11-02
  https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230203-pt-g503-series-multiple-vulnerabilities
• Moxa Security Advisory MPSA-245831 vom 2024-07-30
  https://www.moxa.com/en/support/product-support/security-advisory/mpsa-245831-eds-510a-series-ssh-cryptographic-algorithm-security-enhancement
• Moxa Security Advisory MPSA-241044 vom 2024-11-04
  https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241044-vulnerabilities-identified-in-mds-g4028-l3-series-and-eds-g512e
• Moxa Security Advisory MPSA-160301 vom 2024-11-20
  https://www.moxa.com/en/support/product-support/security-advisory/moxas-response-regarding-sslv2-vulnerabilities-drown
• Moxa Security Advisory MPSA-241407 vom 2025-01-15
  https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series
• F5 Security Advisory K23196136 vom 2025-10-31
  https://my.f5.com/manage/s/article/K23196136