NVD

Id
17161  
Name
CVE-2016-0800  
Description
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-03-01  
Modified Date
2016-12-27  
Seq
2016-0800  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95471 17161 CVE-2016-0800 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722  View
95472 17161 CVE-2016-0800 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
95473 17161 CVE-2016-0800 SUSE-SU-2016:0617  View
95474 17161 CVE-2016-0800 SUSE-SU-2016:0620  View
95475 17161 CVE-2016-0800 SUSE-SU-2016:0621  View
95476 17161 CVE-2016-0800 SUSE-SU-2016:0624  View
95477 17161 CVE-2016-0800 openSUSE-SU-2016:0627  View
95478 17161 CVE-2016-0800 openSUSE-SU-2016:0628  View
95479 17161 CVE-2016-0800 SUSE-SU-2016:0631  View
95480 17161 CVE-2016-0800 openSUSE-SU-2016:0637  View
95481 17161 CVE-2016-0800 openSUSE-SU-2016:0638  View
95482 17161 CVE-2016-0800 openSUSE-SU-2016:0640  View
95483 17161 CVE-2016-0800 SUSE-SU-2016:0641  View
95484 17161 CVE-2016-0800 SUSE-SU-2016:0678  View
95485 17161 CVE-2016-0800 openSUSE-SU-2016:0720  View
95486 17161 CVE-2016-0800 SUSE-SU-2016:1057  View
95487 17161 CVE-2016-0800 openSUSE-SU-2016:1239  View
95488 17161 CVE-2016-0800 openSUSE-SU-2016:1241  View
95489 17161 CVE-2016-0800 HPSBGN03569  View
95490 17161 CVE-2016-0800 HPSBMU03575  View
95491 17161 CVE-2016-0800 HPSBMU03573  View
95492 17161 CVE-2016-0800 RHSA-2016:1519  View
95493 17161 CVE-2016-0800 http://support.citrix.com/article/CTX208403  View
95494 17161 CVE-2016-0800 20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016  View
95495 17161 CVE-2016-0800 http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en  View
95496 17161 CVE-2016-0800 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
95497 17161 CVE-2016-0800 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
95498 17161 CVE-2016-0800 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
95499 17161 CVE-2016-0800 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
95500 17161 CVE-2016-0800 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
95501 17161 CVE-2016-0800 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
95502 17161 CVE-2016-0800 83733  View
95503 17161 CVE-2016-0800 91787  View
95504 17161 CVE-2016-0800 http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf  View
95505 17161 CVE-2016-0800 https://access.redhat.com/security/vulnerabilities/drown  View
95506 17161 CVE-2016-0800 https://drownattack.com  View
95507 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681  View
95508 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516  View
95509 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877  View
95510 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953  View
95511 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441  View
95512 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554  View
95513 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800  View
95514 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667  View
95515 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765  View
95516 17161 CVE-2016-0800 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589  View
95517 17161 CVE-2016-0800 https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03  View
95518 17161 CVE-2016-0800 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168  View
95519 17161 CVE-2016-0800 https://kc.mcafee.com/corporate/index?page=content&id=SB10154  View
95520 17161 CVE-2016-0800 GLSA-201603-15  View
95521 17161 CVE-2016-0800 VU#583776  View
95522 17161 CVE-2016-0800 https://www.openssl.org/news/secadv/20160301.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
781 JVNDB-2016-001554 SSLv2 の暗号通信を解読可能な脆弱性 (DROWN 攻撃) SSLv2 は、十分な回数のハンドシェイクの情報を収集できる場合、暗号通信を解読される可能性があります。これは "DROWN 攻撃" という名称で報じられています。 CVE-2016-0800 87004 CVE-2016-0800 17161 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001554.html 2016-03-01 2016-11-14 View