Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huaweiHuawei TechnologiesHUAWEI-SA-20170419-01-OPENSSL
HistoryApr 19, 2017 - 12:00 a.m.

Security Advisory - OpenSSL Montgomery multiplication may produce incorrect results Vulnerability

2017-04-1900:00:00
Huawei Technologies
www.huawei.com
26

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.008

Percentile

81.3%

JSON

The Broadwell-specific Montgomery multiplication procedure has a denial of service (DoS) vulnerability when handling input longer than 256 bits.Only EC algorithms that use Brainpool P-512 curves are affected. An attacker could exploit this vulnerability to cause DoS during ECDH key negotiation.(Vulnerability ID: HWPSIRT-2016-11044)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2016-7055.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-openssl-en

Affected configurations

Vulners
Node
huawei9032_firmwareMatchv100r001c10
OR
huaweiap5030dn_firmwareMatchv200r007c00spc100
OR
huaweiap5030dn_firmwareMatchv200r007c10
OR
huaweiap5030dn_firmwareMatchv200r007c10spc100
OR
huaweiap5030dn_firmwareMatchv200r007c10spc200
OR
huaweiap8000_firmwareMatchv200r008c00
OR
huaweie9000_chassisMatchv100r001c10spc236
OR
huaweie9000_chassisMatchv100r001c10spc236t
OR
huaweioceanstor_sns3096_firmwareMatchv200r001c00
OR
huaweioceanstor_sns3096_firmwareMatchv200r001c00spc200
OR
huaweite60_firmwareMatchv600r006c00
OR
huaweiesdk_platform_firmwareMatchv200r001c00
OR
huaweiesightMatchv300r002c01
VendorProductVersionCPE
huawei9032_firmwarev100r001c10cpe:2.3:a:huawei:9032_firmware:v100r001c10:*:*:*:*:*:*:*
huaweiap5030dn_firmwarev200r007c00spc100cpe:2.3:a:huawei:ap5030dn_firmware:v200r007c00spc100:*:*:*:*:*:*:*
huaweiap5030dn_firmwarev200r007c10cpe:2.3:a:huawei:ap5030dn_firmware:v200r007c10:*:*:*:*:*:*:*
huaweiap5030dn_firmwarev200r007c10spc100cpe:2.3:a:huawei:ap5030dn_firmware:v200r007c10spc100:*:*:*:*:*:*:*
huaweiap5030dn_firmwarev200r007c10spc200cpe:2.3:a:huawei:ap5030dn_firmware:v200r007c10spc200:*:*:*:*:*:*:*
huaweiap8000_firmwarev200r008c00cpe:2.3:a:huawei:ap8000_firmware:v200r008c00:*:*:*:*:*:*:*
huaweie9000_chassisv100r001c10spc236cpe:2.3:a:huawei:e9000_chassis:v100r001c10spc236:*:*:*:*:*:*:*
huaweie9000_chassisv100r001c10spc236tcpe:2.3:a:huawei:e9000_chassis:v100r001c10spc236t:*:*:*:*:*:*:*
huaweioceanstor_sns3096_firmwarev200r001c00cpe:2.3:o:huawei:oceanstor_sns3096_firmware:v200r001c00:*:*:*:*:*:*:*
huaweioceanstor_sns3096_firmwarev200r001c00spc200cpe:2.3:o:huawei:oceanstor_sns3096_firmware:v200r001c00spc200:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

Related

ibm 48
debiancve 1
alpinelinux 1
nvd 1
osv 3
redhatcve 1
openvas 12
f5 1
openssl 1
nessus 31
cve 1
ubuntucve 1
prion 1
veracode 2
cvelist 1
threatpost 2
freebsd_advisory 1
altlinux 5
slackware 1
cisco 1
symantec 1
thn 1
freebsd 2
mageia 1
nodejsblog 1
archlinux 2
gentoo 1
fortinet 1
ubuntu 1
cloudfoundry 1
redhat 3
suse 2
packetstorm 1
oracle 5
ibm
ibm
Security Bulletin: Vulnerability in OpenSSL affects IBM Security Network Active Bypass (CVE-2016-7055)
2018-06-16 21:59:07
Security Bulletin: Vulnerability affects Watson Explorer Foundational Components
2018-06-17 13:07:37
Security Bulletin: Vulnerability in OpenSSL affects MegaRAID Storage Manager (CVE-2016-7055)
2019-01-31 02:40:01
debiancve
debiancve
CVE-2016-7055
2017-05-04 20:29:00
alpinelinux
alpinelinux
CVE-2016-7055
2017-05-04 20:29:00
nvd
nvd
CVE-2016-7055
2017-05-04 20:29:00
osv
osv
CVE-2016-7055
2017-05-04 20:29:00
libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media
2024-06-15 00:00:00
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
2024-06-15 00:00:00
redhatcve
redhatcve
CVE-2016-7055
2019-10-08 17:01:31
openvas
openvas
OpenSSL Montgomery Multiplication Denial of Service Vulnerability - Linux
2017-02-09 00:00:00
Huawei Data Communication: OpenSSL Montgomery multiplication may produce incorrect results Vulnerability (huawei-sa-20170419-01-openssl)
2020-06-05 00:00:00
OpenSSL Montgomery Multiplication Denial of Service Vulnerability - Windows
2017-02-09 00:00:00
f5
f5
OpenSSL vulnerability CVE-2016-7055
2017-02-03 22:42:00
openssl
openssl
Vulnerability in OpenSSL - Montgomery multiplication may produce incorrect results
2016-11-10 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K43570545)
2017-02-06 00:00:00
openSUSE Security Update : openssl (openSUSE-2017-256)
2017-02-21 00:00:00
openSUSE Security Update : nodejs (openSUSE-2017-284)
2017-02-21 00:00:00
cve
cve
CVE-2016-7055
2017-05-04 20:29:00
ubuntucve
ubuntucve
CVE-2016-7055
2016-11-11 00:00:00
prion
prion
Design/Logic Flaw
2017-05-04 20:29:00
veracode
veracode
Information Disclosure
2017-02-10 02:44:43
Vulnerability Through C Libraries
2017-11-01 05:30:33
cvelist
cvelist
CVE-2016-7055
2017-05-04 20:00:00
threatpost
threatpost
Ubuntu Update Includes OpenSSL Fixes
2017-02-01 14:50:11
OpenSSL Update Fixes High Severity DoS Vulnerability
2017-02-21 16:02:20
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:02.openssl
2017-02-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2k-alt1
2017-01-26 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.2k-alt1
2017-01-26 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2k-alt1
2017-01-26 00:00:00
slackware
slackware
[slackware-security] openssl
2017-02-10 20:40:56
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: November 2016
2016-11-14 16:00:00
symantec
symantec
SA135 : OpenSSL Vulnerabilities 10-Nov-2016
2016-11-30 08:00:00
thn
thn
OpenSSL Releases Patch For "High" Severity Vulnerability
2016-11-10 07:02:00
freebsd
freebsd
openssl -- multiple vulnerabilities
2016-11-10 00:00:00
OpenSSL -- multiple vulnerabilities
2017-01-26 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2017-02-05 23:42:41
nodejsblog
nodejsblog
OpenSSL update, 1.0.2k
2017-01-27 00:00:00
archlinux
archlinux
[ASA-201701-37] openssl: multiple issues
2017-01-28 00:00:00
[ASA-201701-36] lib32-openssl: multiple issues
2017-01-27 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2017-02-14 00:00:00
fortinet
fortinet
OpenSSL Security Advisory [26 Jan 2017]
2018-07-13 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2017-01-31 00:00:00
cloudfoundry
cloudfoundry
USN-3181-1: OpenSSL vulnerabilities | Cloud Foundry
2017-06-02 00:00:00
redhat
redhat
(RHSA-2018:2187) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update
2018-07-12 16:04:13
(RHSA-2018:2186) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 security update
2018-07-12 16:04:10
(RHSA-2018:2185) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update
2018-07-12 16:04:06
suse
suse
Security update for openssl-steam (important)
2018-02-16 12:07:45
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
packetstorm
packetstorm
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
2017-07-14 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.008

Percentile

81.3%

JSON
Related for HUAWEI-SA-20170419-01-OPENSSL
ibm48debiancve1alpinelinux1nvd1osv3redhatcve1openvas12f51openssl1nessus31cve1ubuntucve1prion1veracode2cvelist1threatpost2freebsd_advisory1altlinux5slackware1cisco1symantec1thn1freebsd2mageia1nodejsblog1archlinux2gentoo1fortinet1ubuntu1cloudfoundry1redhat3suse2packetstorm1oracle5