Lucene search
F5F5:K23196136HistoryMar 02, 2016 - 12:00 a.m.
K23196136 : OpenSSL vulnerability CVE-2016-0800
2016-03-0200:00:00
my.f5.com
34
Security Advisory Description
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a “DROWN” attack. (CVE-2016-0800)
Impact
ARX/WebSafe/FirePass/Traffix SDC
There is no impact. These F5 products are not vulnerable to this vulnerability.
BIG-IP/BIG-IQ/Enterprise Manager/LineRate
The DROWN attack issue is exposed when the SSLv2 protocol is available for use along with TLS. In the default configuration, the BIG-IP/BIG-IQ/Enterprise Manager/LineRate systems are not vulnerable to this issue. F5 recommends that you do not use the SSLv2 protocol, and it is not enabled in the BIG-IP/BIG-IQ/Enterprise Manager/LineRate default configuration. Configurations that manually enable SSLv2 expose this vulnerability.
Related
cert
cert
f5
f5
SOL23196136 - OpenSSL vulnerability CVE-2016-0800
2016-03-02 00:00:00
SOL95463126 - OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704
2016-03-09 00:00:00
K95463126 : OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704
2016-03-10 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2016-0800)
2018-06-17 15:19:41
Security Bulletin: Vulnerability in OpenSSL( CVE-2016-0800 ) affect IBM WebSphere MQ on OpenVMS Alpha & Itanium when using HP OpenSSL V1.4 kit
2018-06-22 01:29:13
Security Bulletin: SSLv2 DROWN Vulnerability (CVE-2016-0800)
2018-12-08 04:55:34
hackerone
hackerone
ownCloud: DROWN Attack
2016-03-01 16:45:30
openvas
openvas
OpenSSL SSLv2 DROWN Attack Vulnerability - Linux
2016-03-03 00:00:00
OpenSSL SSLv2 DROWN Attack Vulnerability - Windows
2016-03-03 00:00:00
Extreme ExtremeXOS DROWN Vulnerability (VN-2016-004)
2016-11-29 00:00:00
veracode
veracode
DROWN Attack
2017-01-27 08:38:09
nessus
nessus
SSL DROWN Attack Vulnerability (Decrypting RSA with Obsolete and Weakened eNcryption)
2016-03-01 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K23196136) (DROWN)
2017-05-16 00:00:00
RHEL 6 / 7 : openssl (RHSA-2016:0305) (DROWN)
2016-03-02 00:00:00
threatpost
threatpost
DROWN Flaw Opens 33 Percent Of HTTPS Connections To Attack
2016-03-01 12:30:00
prion
prion
ics
ics
Siemens Industrial Products DROWN Vulnerability (Update C)
2017-11-28 12:00:00
Siemens Industrial Products DROWN Vulnerability (Update C)
2016-04-12 00:00:00
cvelist
cvelist
ubuntucve
ubuntucve
nvd
nvd
huawei
huawei
Security Advisory - OpenSSL DROWN Security Vulnerability
2016-03-30 00:00:00
cve
cve
debiancve
debiancve
cloudfoundry
cloudfoundry
CVE-2016-0800 & CVE-2016-0703 OpenSSL vulnerabilities | Cloud Foundry
2016-03-02 00:00:00
redhat
redhat
(RHSA-2016:0305) Important: openssl security update
2016-03-01 00:00:00
(RHSA-2016:0302) Important: openssl security update
2016-03-01 00:00:00
seebug
seebug
Cross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800)
2016-03-02 00:00:00
centos
centos
openssl security update
2016-03-01 16:57:33
openssl security update
2016-03-01 16:09:29
openssl098e security update
2016-03-09 05:32:33
checkpoint_advisories
checkpoint_advisories
openssl
openssl
Vulnerability in OpenSSL CVE-2016-0800
2016-03-01 00:00:00
paloalto
paloalto
OpenSSL Vulnerabilities
2016-10-18 00:00:00
nmap
nmap
sslv2-drown NSE Script
2016-07-07 16:35:39
oraclelinux
oraclelinux
openssl security update
2016-03-01 00:00:00
openssl security update
2016-03-01 00:00:00
openssl098e security update
2016-03-09 00:00:00
amazon
amazon
Important: openssl098e
2016-04-06 14:40:00
Important: openssl
2016-03-10 16:30:00
suse
suse
Security update for openssl (important)
2016-03-02 12:11:42
Security update for openssl (important)
2016-03-11 14:14:22
Security update for openssl (important)
2016-03-03 15:11:31
mageia
mageia
Updated openssl packages fix security vulnerabilities
2016-03-02 21:28:46
slackware
slackware
[slackware-security] openssl
2016-03-03 06:56:40
metasploit
metasploit
SSL/TLS Version Detection
2022-11-01 03:42:40
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2016-04-04 11:04:25
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.2g-alt1
2016-03-01 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.2g-alt1
2016-03-01 00:00:00
debian
debian
[SECURITY] [DSA 3500-1] openssl security update
2016-03-01 14:34:35
archlinux
archlinux
lib32-openssl: multiple issues
2016-03-07 00:00:00
openssl: multiple issues
2016-03-07 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-03-20 00:00:00
osv
osv
openssl - security update
2016-03-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:12.openssl
2016-03-10 00:00:00
freebsd
freebsd
FreeBSD -- Multiple OpenSSL vulnerabilities
2016-03-10 00:00:00
openwrt
openwrt
openssl: Security update (9 CVEs)
2016-03-01 16:52:09
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016
2016-03-02 12:30:00
arista
arista
Security Advisory 0018
2016-03-01 00:00:00