Lucene search
F5F5:K64009378HistoryJan 29, 2016 - 12:00 a.m.
K64009378 : OpenSSL vulnerability CVE-2016-0701
2016-01-2900:00:00
my.f5.com
17
Security Advisory Description
The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file. (CVE-2016-0701)
Impact
None. F5 products are not affected by this vulnerability.
Related
nessus
nessus
Ubuntu 15.10 : openssl vulnerability (USN-2883-1)
2016-01-29 00:00:00
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2022-1455)
2022-04-18 00:00:00
EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2022-1635)
2022-05-05 00:00:00
veracode
veracode
Unsafe Number Generation
2017-02-06 03:20:38
hackerone
hackerone
f5
f5
SOL64009378 - OpenSSL vulnerability CVE-2016-0701
2016-01-28 00:00:00
K30184101 : OpenSSL Vulnerability CVE-2021-4160
2022-03-31 00:00:00
K34681653 : OpenSSL vulnerability CVE-2017-3738
2018-01-26 00:00:00
intothesymmetry
intothesymmetry
The RFC 5114 saga
2016-10-20 12:16:00
The Curious Case of WebCrypto Diffie-Hellman on Firefox - Small Subgroups Key Recovery Attack on DH
2020-01-07 15:08:00
OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)
2016-01-29 05:19:00
cvelist
cvelist
CVE-2016-0701
2016-02-15 00:00:00
CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS
2022-01-28 00:00:00
CVE-2017-3738
2017-12-07 00:00:00
openvas
openvas
OpenSSL 'Diffie-Hellman small subgroups' MitM Attack Vulnerability - Linux
2016-02-01 00:00:00
OpenSSL 'Diffie-Hellman small subgroups' MitM Attack Vulnerability - Windows
2016-02-01 00:00:00
Ubuntu: Security Advisory (USN-2883-1)
2016-02-05 00:00:00
fortinet
fortinet
OpenSSL Advisory - January 2016
2016-07-12 00:00:00
cve
cve
ubuntu
ubuntu
OpenSSL vulnerability
2016-01-28 00:00:00
ubuntucve
ubuntucve
openssl
openssl
Vulnerability in OpenSSL CVE-2016-0701
2016-01-28 00:00:00
Vulnerability in OpenSSL CVE-2021-4160
2022-01-28 00:00:00
Vulnerability in OpenSSL CVE-2017-3738
2017-12-07 00:00:00
debiancve
debiancve
prion
prion
Design/Logic Flaw
2016-02-15 02:59:00
Design/Logic Flaw
2022-01-28 22:15:00
Buffer overflow
2017-12-07 16:29:00
nvd
nvd
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.2f-alt1
2016-01-28 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2f-alt1
2016-01-28 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2016-02-09 16:05:25
Updated openssl packages fix security vulnerabilities
2017-12-17 02:20:04
ibm
ibm
vulnrichment
vulnrichment
CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS
2022-01-28 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL (January 2016) Affecting Cisco Products
2016-01-29 16:00:00
freebsd
freebsd
OpenSSL -- BN_mod_exp incorrect results on MIPS
2022-01-28 00:00:00
openssl -- multiple vulnerabilities
2016-01-22 00:00:00
OpenSSL -- multiple vulnerabilities
2017-12-07 00:00:00
redhatcve
redhatcve
CVE-2021-4160
2022-01-31 17:57:31
CVE-2017-3738
2019-10-08 22:39:45
thn
thn
Critical OpenSSL Flaw Allows Hackers to Decrypt HTTPS Traffic
2016-01-28 22:01:00
fedora
fedora
[SECURITY] Fedora 23 Update: openssl-1.0.2f-1.fc23
2016-01-30 18:23:36
cert
cert
OpenSSL re-uses unsafe prime numbers in Diffie-Hellman protocol
2016-01-28 00:00:00
archlinux
archlinux
[ASA-201804-6] lib32-openssl: private key recovery
2018-04-15 00:00:00
openssl: man-in-the-middle
2016-01-29 00:00:00
lib32-openssl: man-in-the-middle
2016-01-29 00:00:00
openwrt
openwrt
openssl: Security update (2 CVEs)
2016-01-28 20:32:02
openssl: Security update (2 CVEs)
2016-01-29 15:48:20
osv
osv
CVE-2021-4160
2022-01-28 22:15:15
CVE-2017-3738
2017-12-07 16:29:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:12.openssl
2017-12-09 00:00:00
symantec
symantec
SA111 : OpenSSL Vulnerabilities 28-Jan-2016
2016-02-18 08:00:00
nodejsblog
nodejsblog
February 2016 Security Release Summary
2016-02-09 00:00:00
alpinelinux
alpinelinux
CVE-2017-3738
2017-12-07 16:29:00
amazon
amazon
Medium: openssl
2018-05-10 17:29:00
Medium: openssl
2018-04-26 17:38:00
suse
suse
Security update for openssl (important)
2017-12-16 06:08:45
Security update for openssl (important)
2017-12-16 15:07:17
Security update for openssl (important)
2016-03-02 23:12:04
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-01-29 00:00:00
packetstorm
packetstorm
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
2017-07-14 00:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update - July 2016
2016-07-19 00:00:00
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00