NVD

Id
18451  
Name
CVE-2016-2181  
Description
The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-02-28  
Published
2016-09-16  
Modified Date
2017-02-23  
Seq
2016-2181  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102547 18451 CVE-2016-2181 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
102548 18451 CVE-2016-2181 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
102549 18451 CVE-2016-2181 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
102550 18451 CVE-2016-2181 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
102551 18451 CVE-2016-2181 92982  View
102552 18451 CVE-2016-2181 http://www.splunk.com/view/SP-CAAAPSV  View
102553 18451 CVE-2016-2181 http://www.splunk.com/view/SP-CAAAPUE  View
102554 18451 CVE-2016-2181 https://bto.bluecoat.com/security-advisory/sa132  View
102555 18451 CVE-2016-2181 https://git.openssl.org/?p=openssl.git;a=commit;h=1fb9fdc3027b27d8eb6a1e6a846435b070980770  View
102556 18451 CVE-2016-2181 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4006 JVNDB-2016-004779 OpenSSL の DTLS の実装のアンチリプレイ機能におけるサービス運用妨害 (DoS) の脆弱性 penSSL の DTLS の実装のアンチリプレイ (Anti-Replay) 機能は、過度に大きなシーケンス番号を伴う新しいエポック番号の早期使用を誤って処理するため、サービス運用妨害 (誤判定のパケットドロップ) 状態にされる脆弱性が存在します。 CVE-2016-2181 88687 CVE-2016-2181 18451 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004779.html 2016-08-19 2016-11-17 View