CVE-2016-2107 | Mend Vulnerability Database

Vulnerability DatabaseCVE-2016-2107

CVE-2016-2107

May 05, 2016

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.

Related Resources (61)

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us

https://www.tenable.com/security/tns-2016-18

http://www.securityfocus.com/bid/91787

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html

http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html

http://rhn.redhat.com/errata/RHSA-2016-2073.html

https://www.exploit-db.com/exploits/39768/

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149

http://rhn.redhat.com/errata/RHSA-2016-0722.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804

http://www.ubuntu.com/usn/USN-2959-1

https://security-tracker.debian.org/tracker/CVE-2016-2107

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us

https://kc.mcafee.com/corporate/index?page=content&id=SB10160

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

http://www.securityfocus.com/bid/89760

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202

http://source.android.com/security/bulletin/2016-07-01.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html

https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/

https://security.gentoo.org/glsa/201612-16

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=68595c0c2886e7942a14f98c17a55a88afb6c292

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

http://rhn.redhat.com/errata/RHSA-2016-0996.html

http://www.debian.org/security/2016/dsa-3566

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html

http://support.citrix.com/article/CTX212736

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html

https://www.openssl.org/news/secadv/20160503.txt

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html

https://people.canonical.com/~ubuntu-security/cve/CVE-2016-2107

https://bto.bluecoat.com/security-advisory/sa123

http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html

http://rhn.redhat.com/errata/RHSA-2016-2957.html

http://www.securitytracker.com/id/1035721

https://support.apple.com/HT206903

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc

https://security.netapp.com/advisory/ntap-20160504-0001/

https://access.redhat.com/security/cve/CVE-2016-2107

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Do you need more information?

CVSS v4

Base Score:

8.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

NONE

Vulnerable System Availability

NONE

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

CVSS v2

Base Score:

2.6

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

Weakness Type (CWE)

Exposure of Sensitive Information to an Unauthorized Actor

EPSS

Base Score:

82.72