CVE - CVE - 2016 - 2107

CVE-ID
cve - 2016 - 2107	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
AES-NI实现在OpenSSL 1.0.1t 1.0.2 1.0.2h之前并没有考虑在一定填充检查内存分配,它允许远程攻击者获得敏感的明文信息通过padding oracle攻击一个AES CBC会话。注意:这个漏洞的存在,因为错误的修复cve - 2013 - 0169。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
苹果:苹果- sa - 2016 - 07 - 18 - 1 URL: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html 报价:89760 URL: http://www.securityfocus.com/bid/89760 报价:91787 URL: http://www.securityfocus.com/bid/91787 思科:20160504多个漏洞OpenSSL影响思科产品:2016年5月 URL: http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco - sa - 20160504 - openssl 确认:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 确认:http://source.android.com/security/bulletin/2016 - 07 - 01. - html 确认:http://support.citrix.com/article/CTX212736 确认:http://www.oracle.com/technetwork/security - advisory/cpujan2018 - 3236628. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpujul2016 - 2881720. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpujul2017 - 3236622. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpujul2018 - 4258247. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2016 - 2881722. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2017 - 3236626. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2018 - 4428296. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinapr2016 - 2952098. - html 确认:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016 - 2952096. - html 确认:https://bto.bluecoat.com/security-advisory/sa123 确认:https://cert - portal.siemens.com/productcert/pdf/ssa - 412672. - pdf 确认:https://git.openssl.org/?p=openssl.git; =提交;h = 68595 c0c2886e7942a14f98c17a55a88afb6c292 确认:https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us 确认:https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us 确认:https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us 确认:https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us 确认:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862 确认:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149 确认:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804 确认:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 确认:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202 确认:https://kc.mcafee.com/corporate/index?page=content&id=SB10160 确认:https://security.netapp.com/advisory/ntap 0001/——20160504 确认:https://support.apple.com/HT206903 确认:https://www.openssl.org/news/万博下载包secadv/20160503.txt 确认:https://www.tenable.com/security/tns - 2016 - 18 DEBIAN: dsa - 3566 URL: http://www.debian.org/security/2016/dsa - 3566 EXPLOIT-DB: 39768 URL: https://www.exploit-db.com/exploits/39768/ FEDORA: FEDORA - 2016 - 05 - c567df1a URL: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html FEDORA: FEDORA - 2016 - 1411324654 URL: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html FEDORA: FEDORA - 2016 - 1 - e39d934ed URL: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html FREEBSD: FreeBSD-SA-16:17 URL: https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc GENTOO: glsa - 201612 - 16 URL: https://security.gentoo.org/glsa/201612-16 MISC: http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html MISC: http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html MISC: https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/ 红帽:RHSA-2016:0722 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 0722. - html 红帽:RHSA-2016:0996 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 0996. - html 红帽:RHSA-2016:2073 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 2073. - html 红帽:RHSA-2016:2957 URL: http://rhn.redhat.com/errata/rhsa - 2016 - 2957. - html SECTRACK: 1035721 URL: http://www.securitytracker.com/id/1035721 SLACKWARE: SSA: 2016-124-01 URL: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103 SUSE: SUSE-SU-2016:1206 URL: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html SUSE: SUSE-SU-2016:1228 URL: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html SUSE: SUSE-SU-2016:1233 URL: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html SUSE: openSUSE-SU-2016:1237 URL: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html SUSE: openSUSE-SU-2016:1238 URL: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html SUSE: openSUSE-SU-2016:1240 URL: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html SUSE: openSUSE-SU-2016:1243 URL: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html SUSE: openSUSE-SU-2016:1566 URL: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html UBUNTU: usn - 2959 - 1 URL: http://www.ubuntu.com/usn/usn - 2959 - 1
分配中央社
红帽公司。
创建日期记录
20160129	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20160129)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2016 - 2107