Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2016-0702
HistoryMar 03, 2016 - 12:00 a.m.

CVE-2016-0702

2016-03-0300:00:00
redhat
www.cve.org

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

JSON

The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a “CacheBleed” attack.

References

Related

cve 1
ibm 79
nvd 1
nessus 37
f5 2
debiancve 1
ubuntucve 1
prion 1
veracode 1
openssl 1
fedora 2
openvas 31
freebsd 2
suse 14
ubuntu 1
centos 1
redhat 2
aix 2
cloudfoundry 1
oraclelinux 2
mageia 1
slackware 1
altlinux 4
debian 1
archlinux 2
gentoo 1
amazon 1
osv 1
freebsd_advisory 1
openwrt 1
cisco 1
arista 1
cve
cve
CVE-2016-0702
2016-03-03 20:59:00
ibm
ibm
Security Bulletin: Vulnerability IBM GSKit affect IBM Host On-Demand
2018-07-30 17:06:57
Security Bulletin: Vulnerability in OpenSSL affects Watson Explorer (CVE-2016-0702)
2018-06-17 13:07:04
Security Bulletin: IBM MQ and IBM WebSphere MQ are affected by Side channel attacks on modular exponentiation (CVE-2016-0702)
2022-08-20 01:29:42
nvd
nvd
CVE-2016-0702
2016-03-03 20:59:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K79215841)
2016-08-30 00:00:00
openSUSE Security Update : libressl (openSUSE-2017-561)
2017-05-09 00:00:00
openSUSE Security Update : libressl (openSUSE-2017-560)
2017-05-09 00:00:00
f5
f5
SOL79215841 - OpenSSL vulnerability CVE-2016-0702
2016-03-23 00:00:00
K79215841 : OpenSSL vulnerability CVE-2016-0702
2016-03-23 00:00:00
debiancve
debiancve
CVE-2016-0702
2016-03-03 20:59:00
ubuntucve
ubuntucve
CVE-2016-0702
2016-03-01 00:00:00
prion
prion
Design/Logic Flaw
2016-03-03 20:59:00
veracode
veracode
Side Channel Attack On Modular Exponentiation
2017-01-26 08:01:41
openssl
openssl
Vulnerability in OpenSSL CVE-2016-0702
2016-03-01 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: openssl-1.0.2g-2.fc23
2016-03-03 20:27:06
[SECURITY] Fedora 22 Update: openssl-1.0.1k-14.fc22
2016-03-13 09:57:52
openvas
openvas
Fedora Update for openssl FEDORA-2016-2802690366
2016-03-04 00:00:00
SUSE: Security Advisory for compat-openssl098 (SUSE-SU-2016:1267-1)
2016-05-10 00:00:00
Ubuntu: Security Advisory (USN-2914-1)
2016-03-02 00:00:00
freebsd
freebsd
node -- multiple vulnerabilities
2016-03-02 00:00:00
FreeBSD -- Multiple OpenSSL vulnerabilities
2016-03-10 00:00:00
suse
suse
Security update for compat-openssl098 (important)
2016-05-11 00:07:42
Security update for openssl (important)
2016-05-19 19:09:52
Security update for nodejs (important)
2016-06-14 11:08:26
ubuntu
ubuntu
OpenSSL vulnerabilities
2016-03-01 00:00:00
centos
centos
openssl security update
2016-03-01 16:09:29
redhat
redhat
(RHSA-2016:0379) Important: rhev-hypervisor security, bug fix and enhancement update
2016-03-09 00:00:00
(RHSA-2016:0301) Important: openssl security update
2016-03-01 00:00:00
aix
aix
Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX
2018-12-14 12:09:04
Multiple vulnerabilities in OpenSSL affect AIX
2016-04-04 11:04:25
cloudfoundry
cloudfoundry
USN-2914-1 OpenSSL vulnerabilities | Cloud Foundry
2016-03-24 00:00:00
oraclelinux
oraclelinux
openssl security update
2016-03-01 00:00:00
openssl security update
2016-03-01 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2016-03-02 21:28:46
slackware
slackware
[slackware-security] openssl
2016-03-03 06:56:40
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.2g-alt1
2016-03-01 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1s-alt0.M70P.1
2016-03-02 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.2g-alt1
2016-03-01 00:00:00
debian
debian
[SECURITY] [DSA 3500-1] openssl security update
2016-03-01 14:34:35
archlinux
archlinux
lib32-openssl: multiple issues
2016-03-07 00:00:00
openssl: multiple issues
2016-03-07 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-03-20 00:00:00
amazon
amazon
Important: openssl
2016-03-10 16:30:00
osv
osv
openssl - security update
2016-03-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:12.openssl
2016-03-10 00:00:00
openwrt
openwrt
openssl: Security update (9 CVEs)
2016-03-01 16:52:09
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016
2016-03-02 12:30:00
arista
arista
Security Advisory 0018
2016-03-01 00:00:00

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.7%

JSON
Related for CVELIST:CVE-2016-0702
cve1ibm79nvd1nessus37f52debiancve1ubuntucve1prion1veracode1openssl1fedora2openvas31freebsd2suse14ubuntu1centos1redhat2aix2cloudfoundry1oraclelinux2mageia1slackware1altlinux4debian1archlinux2gentoo1amazon1osv1freebsd_advisory1openwrt1cisco1arista1