CVE - CVE - 2016 - 0701

CVE-ID
cve - 2016 - 0701	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
在加密/ dh / dh_check DH_check_pub_key函数。c在OpenSSL 1.0.2 1.0.2f并不确保质数适合diffie - hellman密钥交换(DH),这使得远程攻击者更容易发现一个私人DH指数通过多个握手同行,选择了一个不恰当的数字,证明了一个数字一个X9.42文件。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
MISC: 1034849 URL: http://www.securitytracker.com/id/1034849 MISC: 82233 URL: http://www.securityfocus.com/bid/82233 MISC: 91787 URL: http://www.securityfocus.com/bid/91787 MISC: fedora - 2016 - 527018 - d2ff URL: http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html MISC: glsa - 201601 - 05 URL: https://security.gentoo.org/glsa/201601-05 MISC: usn - 2883 - 1 URL: http://www.ubuntu.com/usn/usn - 2883 - 1 MISC: VU # 257823 URL: https://www.kb.cert.org/vuls/id/257823 MISC: http://intothesymmetry.blogspot.com/2016/01/openssl-key-recovery-attack-on-dh-small.html URL: http://intothesymmetry.blogspot.com/2016/01/openssl-key-recovery-attack-on-dh-small.html MISC: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 URL: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 MISC: http://www.openssl.org万博下载包/news/secadv/20160128.txt URL: http://www.openssl.org万博下载包/news/secadv/20160128.txt MISC: http://www.oracle.com/technetwork/security - advisory/cpujul2016 - 2881720. - html URL: http://www.oracle.com/technetwork/security advisory/cpujul2016 - 2881720. - html MISC: http://www.oracle.com/technetwork/security - advisory/cpuoct2017 - 3236626. - html URL: http://www.oracle.com/technetwork/security advisory/cpuoct2017 - 3236626. - html MISC: https://cert - portal.siemens.com/productcert/pdf/ssa - 412672. - pdf URL: https://cert portal.siemens.com/productcert/pdf/ssa - 412672. - pdf MISC: https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=878e2c5b13010329c203f309ed0c8f2113f85648 URL: https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=878e2c5b13010329c203f309ed0c8f2113f85648 MISC: https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c5b831f21d0d29d1e517d139d9d101763f60c9a2 URL: https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c5b831f21d0d29d1e517d139d9d101763f60c9a2 MISC: https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us URL: https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us MISC: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164821 URL: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164821 MISC: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893 URL: https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893 MISC: https://www.oracle.com/security-alerts/cpuapr2020.html URL: https://www.oracle.com/security-alerts/cpuapr2020.html MISC: https://www.oracle.com/security-alerts/cpujan2020.html URL: https://www.oracle.com/security-alerts/cpujan2020.html MISC: https://www.oracle.com/security-alerts/cpujul2020.html URL: https://www.oracle.com/security-alerts/cpujul2020.html MISC: https://www.oracle.com/security-alerts/cpuoct2020.html URL: https://www.oracle.com/security-alerts/cpuoct2020.html MISC: https://www.oracle.com/technetwork/security - advisory/cpujul2019 - 5072835. - html URL: https://www.oracle.com/technetwork/security advisory/cpujul2019 - 5072835. - html MISC: openSUSE-SU-2016:0637 URL: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html
分配中央社
红帽公司。
创建日期记录
20151216	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20151216)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2016 - 0701