OpenSSL: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 14

• High 7.5
  CVE-2016-2183 Public exploit EPSS 95%

  The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

  openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine
  Sep 1, 2016
• Unscored —
  CVE-2016-2177 EPSS 45%

  OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote at…

  openssl openssl openssl Debian Ubuntu Alpine
  Jun 20, 2016
• Unscored —
  CVE-2016-2178

  The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of cons…

  openssl openssl openssl Debian Ubuntu Alpine
  Jun 20, 2016
• Unscored —
  CVE-2016-2179 EPSS 27%

  The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated wit…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-2180 EPSS 30%

  The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) im…

  openssl openssl openssl Debian Ubuntu Alpine
  Aug 1, 2016
• Unscored —
  CVE-2016-2181 EPSS 23%

  The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number i…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-2182 EPSS 44%

  The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, whi…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-6302 EPSS 28%

  The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validati…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-6303 EPSS 32%

  Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers …

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 16, 2016
• Unscored —
  CVE-2016-6304 EPSS 63%

  Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote a…

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 26, 2016
• Unscored —
  CVE-2016-6305 EPSS 16%

  The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a…

  Sep 26, 2016
• Unscored —
  CVE-2016-6306 EPSS 42%

  The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial …

  openssl openssl openssl Debian Ubuntu Alpine
  Sep 26, 2016
• Unscored —
  CVE-2016-6307 EPSS 14%

  The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive lengt…

  Sep 26, 2016
• Unscored —
  CVE-2016-6308 EPSS 12%

  statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an …

  Sep 26, 2016

Revision history

1. 2025-11-02 #90

   Neue Updates von F5 aufgenommen

2. 2025-04-10 #89

   Neue Updates aufgenommen

3. 2025-01-08 #88

   Neue Updates von Juniper aufgenommen

4. 2024-10-13 #87

   Neue Updates von IBM aufgenommen

5. 2024-01-25 #86

   Neue Updates von Dell aufgenommen

6. 2022-04-10 #85

   Neue Updates von Oracle Linux aufgenommen

7. 2021-05-17 #84

   Neue Updates von F5 aufgenommen

8. 2021-03-31 #83

   Neue Updates von Oracle Linux aufgenommen

9. 2020-03-30 #82

   Neue Updates von EMC aufgenommen

10. 2019-09-26 #81

    Neue Updates von Red Hat aufgenommen

11. 2019-08-18 #80

    Neue Updates von Oracle Linux aufgenommen

12. 2019-05-20 #79

    Neue Updates von Red Hat aufgenommen

13. 2019-03-13 #78

    Neue Updates von Oracle Linux aufgenommen

14. 2019-02-07 #77

    Neue Updates von NetApp aufgenommen

15. 2018-11-05 #76

    Added references

16. 2018-07-15 #75

    New remediations available

17. 2018-07-12 #74

    New remediations available

18. 2018-07-03 #73

    New remediations available

19. 2018-01-30 #72

    New remediations available

20. 2017-12-07 #71

    New remediations available

21. 2017-11-05 #70

    New remediations available

22. 2017-11-02 #69

    New remediations available

23. 2017-09-13 #67

    New remediations available

24. 2017-09-13 #68

    Version nicht vorhanden

25. 2017-08-31 #66

    Version nicht vorhanden

References

• OpenSSL Security Advisory vom 2016-09-22
  https://www.openssl.org/news/secadv/20160922.txt
• FreeBSD Security Advisory FREEBSD-SA-16:26.OPENSSL vom 2016-09-23
  https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc
• Ubuntu Security Notice USN-3087-2 vom 2016-09-23
  http://www.ubuntu.com/usn/usn-3087-2/
• SUSE Security Update Announcement ID SUSE-SU-2016:2387-1
  https://www.suse.com/de-de/support/update/announcement/2016/suse-su-20162387-1.html
• Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27
  https://access.redhat.com/errata/RHSA-2016:1940
• SUSE Security Update SUSE-SU-2016:2394-1 vom 2016-09-27
  https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1.html
• CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-09-27
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• SUSE Security Update SUSE-SU-2016:2458-1 vom 2016-10-05
  https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1.html
• Arista Security Advisory 0024 vom 2016-10-05
  http://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24
• F5 Security Advisory sol13167034 vom 2016-10-05
  https://support.f5.com/kb/en-us/solutions/public/k/13/sol13167034.html?ref=rss
• Blue Coat Security Advisory sa13 vom 2016-10-06
  https://kb.bluecoat.com/security-advisory/sa132
• SUSE Security Update SUSE-SU-2016:2468-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1.html
• SUSE Security Update SUSE-SU-2016:2469-1 vom 2016-10-07
  https://www.suse.com/support/update/announcement/2016/suse-su-20162469-1.html
• Juniper Security Bulletin JSA10759 vom 2016-10-14
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759&cat=SIRT_1&actp=LIST
• Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016&vs_k=1
• F5 Security Advisory sol90492697 vom 2016-10-24
  https://support.f5.com/kb/en-us/solutions/public/k/90/sol90492697.html
• SUSE Security Update SUSE-SU-2016:2545-1 vom 2016-10-25
  https://www.suse.com/support/update/announcement/2016/suse-su-20162545-1.html
• Tenable Advisory ID TNS-2016-16 vom 2016-10-25
  http://www.tenable.com/security/tns-2016-16
• F5 Security Advisory sol59298921 vom 2016-10-30
  https://support.f5.com/kb/en-us/solutions/public/k/59/sol59298921.html?ref=rss
• F5 Security Advisory SOL23512141 vom 2016-11-01
  https://support.f5.com/kb/en-us/solutions/public/k/23/sol23512141.html
• SUSE Security Update SUSE-SU-2016:2470-2 vom 2016-11-01
  https://www.suse.com/support/update/announcement/2016/suse-su-20162470-2.html
• HPE SECURITY BULLETIN c05323116 vom 2016-11-01
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05323116
• F5 Security Advisory SOL01276005 vom 2016-11-04
  https://support.f5.com/kb/en-us/solutions/public/k/01/sol01276005.html
• F5 Security Advisory SOL02652550 vom 2016-11-14
  https://support.f5.com/kb/en-us/solutions/public/k/02/sol02652550.html
• Red Hat Security Advisory RHSA-2016:2802 vom 2016-11-18
  https://access.redhat.com/errata/RHSA-2016:2802
• BLUECOAT Security Advisory SA135 vom 2016-12-01
  https://bto.bluecoat.com/security-advisory/sa135
• Xerox Mini Bulletin XRX16AF vom 2016-12-04
  https://www.xerox.com/download/security/security-bulletin/1cf9a-54159c674d1b0/cert_Security_Mini-_Bulletin_XRX16AF_for_PH3635_v1-0.pdf
• RedHat Security Advisory RHSA-2016-2957
  https://rhn.redhat.com/errata/RHSA-2016-2957.html
• BLUECOAT Security Advisory SA137 vom 2016-12-20
  https://bto.bluecoat.com/security-advisory/sa137
• BLUECOAT Security Advisory SA133 vom 2016-12-23
  https://bto.bluecoat.com/security-advisory/sa133
• Juniper Security Advisory JSA10774 vom 2017-01-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774
• Juniper Security Advisory JSA10770 vom 2017-01-12
  http://www.auscert.org.au/render.html?it=42842
• HP Security Bulletin c05369403
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05369403
• Red Hat Security Advisory RHSA-2017:0193 vom 2017-01-26
  https://access.redhat.com/errata/RHSA-2017:0193
• Red Hat Security Advisory RHSA-2017:0194 vom 2017-01-26
  https://access.redhat.com/errata/RHSA-2017:0194
• Ubuntu Security Notice USN-3181-1 vom 2017-01-31
  http://www.ubuntu.com/usn/usn-3181-1/
• SUSE Security Update SUSE-SU-2017:0460-1 vom 2017-02-14
  https://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html
• Red Hat Security Advisory RHSA-2017:0462 vom 2017-03-08
  https://access.redhat.com/errata/RHSA-2017:0462
• Xerox Security Bulletin XRX17-006 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf
• Xerox Security Bulletin XRX17-005 vom 2017-03-08
  https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf
• SUSE Security Update SUSE-SU-2017:0719-1 vom 2017-03-17
  https://www.suse.com/support/update/announcement/2017/suse-su-20170719-1.html
• SUSE Security Update SUSE-SU-2017:0716-1 vom 2017-03-17
  https://www.suse.com/support/update/announcement/2017/suse-su-20170716-1.html
• SUSE Security Update SUSE-SU-2017:0726-1 vom 2017-03-17
  https://www.suse.com/support/update/announcement/2017/suse-su-20170726-1.html
• Fortinet Security Advisory FG-IR-16-048 vom 2017-04-06
  http://fortiguard.com/psirt/FG-IR-16-048
• NetApp Advisory Number NTAP-20160928-0001 vom 2017-04-06
  https://kb.netapp.com/support/s/article/ka51A00000007QeQAI/NTAP-20160928-0001?language=en_US
• Red Hat Security Advisory RHSA-2017:1414 vom 2017-06-07
  https://access.redhat.com/errata/RHSA-2017:1414
• Red Hat Security Advisory RHSA-2017:1413 vom 2017-06-07
  https://access.redhat.com/errata/RHSA-2017:1413
• Red Hat Security Advisory RHSA-2017:1415 vom 2017-06-08
  https://rhn.redhat.com/errata/RHSA-2017-1415.html
• Red Hat Security Advisory RHSA-2017:1658 vom 2017-06-29
  https://access.redhat.com/errata/RHSA-2017:1658
• HPE SECURITY BULLETIN hpesbgn03765en_us vom 2017-08-31
  https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03765en_us
• Red Hat Security Advisory RHSA-2017:2710 vom 2017-09-13
  https://access.redhat.com/errata/RHSA-2017:2710
• Red Hat Security Advisory RHSA-2017:2709 vom 2017-09-13
  https://access.redhat.com/errata/RHSA-2017:2709
• Red Hat Security Advisory RHSA-2017:2708 vom 2017-09-13
  https://access.redhat.com/errata/RHSA-2017:2708
• Xerox Mini Bulletin XRX17AD vom 2017-09-28
  https://security.business.xerox.com/wp-content/uploads/2017/09/cert_Security_Mini-_Bulletin_XRX17AD_for_PH3635_v1.0.pdf
• Xerox Mini Bulletin XRX17AE vom 2017-09-28
  https://security.business.xerox.com/wp-content/uploads/2017/09/cert_Security_Mini-_Bulletin_XRX17AE_for_WC3325_v1.0.pdf
• Red Hat Security Advisory RHSA-2017:3114 vom 2017-11-02
  https://access.redhat.com/errata/RHSA-2017:3114
• Red Hat Security Advisory RHSA-2017:3113 vom 2017-11-02
  https://access.redhat.com/errata/RHSA-2017:3113
• F5 Security Advisory K53084033 vom 2017-11-06
  https://support.f5.com/csp/article/K53084033
• McAfee Security Bulletin:SB10215
  https://kc.mcafee.com/corporate/index?page=content&id=SB10215
• NetApp Security Advisory NTAP-20160915-0001 vom 2018-01-30
  https://security.netapp.com/advisory/ntap-20160915-0001/
• Red Hat Security Advisory RHSA-2018:2123 vom 2018-07-03
  http://rhn.redhat.com/errata/RHSA-2018-2123.html
• Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13
  https://access.redhat.com/errata/RHSA-2018:2185
• CentOS Security Advisory CESA-2018:2123 vom 2018-07-13
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2018-2123-Moderate-CentOS-7-python-Security-Update-tp4645172.html
• NetApp Security Advisory NTAP-20170119-0001 vom 2019-02-07
  https://security.netapp.com/advisory/ntap-20170119-0001/
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Red Hat Security Advisory RHSA-2019:1245 vom 2019-05-20
  https://access.redhat.com/errata/RHSA-2019:1245
• Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16
  http://linux.oracle.com/errata/ELSA-2019-4747.html
• Red Hat Security Advisory RHSA-2019:2859 vom 2019-09-27
  https://access.redhat.com/errata/RHSA-2019:2859
• EMC Security Advisory 542344 vom 2020-03-31
  https://www.dell.com/support/security/de-de/details/542344/DSA-2020-072-Dell-EMC-VNX2-Family-Security-Update-for-Multiple-Third-Party-Component-Vulnerabilit
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• F5 Security Advisory K90492697 vom 2021-05-18
  https://support.f5.com/csp/article/K90492697
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html
• Dell Knowledge Base Article
  https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities
• IBM Security Bulletin 7173018 vom 2024-10-14
  https://www.ibm.com/support/pages/node/7173018
• Juniper Security Advisory JSA92874 vom 2024-01-09
  https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release
• Juniper Security Bulletin
  https://supportportal.juniper.net/s/article/2025-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-24-1R2-release?language=en_US
• F5 Security Advisory K02652550 vom 2025-10-31
  https://my.f5.com/manage/s/article/K02652550