Lucene search

[email protected]NVD:CVE-2016-5285

HistoryNov 15, 2019 - 4:15 p.m.

CVE-2016-5285

2019-11-1516:15:10

CWE-476

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.025 Low

EPSS

Percentile

90.2%

JSON

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

Affected configurations

NVD

Node

mozillanssRange<3.26

Node

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

Node

redhatenterprise_linuxMatch5.0

redhatenterprise_linuxMatch6.0

redhatenterprise_linuxMatch7.0

Node

suselinux_enterprise_serverMatch11sp2ltss

Node

avayaaura_application_enablement_servicesRange6.1–6.3.3

avayaaura_application_enablement_servicesMatch7.0

avayaaura_application_server_5300Match3.0-

avayaaura_application_server_5300Match3.0sp1

avayaaura_application_server_5300Match3.0sp10

avayaaura_application_server_5300Match3.0sp10.1

avayaaura_application_server_5300Match3.0sp11

avayaaura_application_server_5300Match3.0sp11.1

avayaaura_application_server_5300Match3.0sp12

avayaaura_application_server_5300Match3.0sp12.1

avayaaura_application_server_5300Match3.0sp12.2

avayaaura_application_server_5300Match3.0sp12.3

avayaaura_application_server_5300Match3.0sp12.5

avayaaura_application_server_5300Match3.0sp3

avayaaura_application_server_5300Match3.0sp5

avayaaura_application_server_5300Match3.0sp7

avayaaura_communication_managerRange6.0–6.3.117.0

avayaaura_communication_managerMatch7.0-

avayaaura_communication_managerMatch7.0sp

avayaaura_communication_managerMatch7.0sp3

avayaaura_communication_manager_messagintMatch7.0-

avayaaura_communication_manager_messagintMatch7.0sp1

avayabreeze_platformRange3.0–3.2

avayacall_management_systemRange18.0.0.1–18.0.0.2

avayacall_management_systemMatch17.0-

avayacall_management_systemMatch17.0r3

avayacall_management_systemMatch17.0r4

avayacall_management_systemMatch17.0r5

avayacall_management_systemMatch17.0r6

avayaiqMatch5.2.x

Node

avayacs1000e_firmwareRange7.0–7.6

AND

avayacs1000eMatch-

Node

avayacs1000m_firmwareRange7.0–7.6

AND

avayacs1000mMatch-

Node

avayacs1000e\/cs1000m_signaling_server_firmwareRange7.0–7.6

AND

avayacs1000e\/cs1000m_signaling_serverMatch-

Node

avayaaura_conferencingMatch7.0

avayaaura_conferencingMatch7.2

avayaaura_conferencingMatch8.0-

avayaaura_conferencingMatch8.0sp2

avayaaura_conferencingMatch8.0sp4

avayaaura_conferencingMatch8.0sp5

avayaaura_conferencingMatch8.0sp7

avayaaura_conferencingMatch8.0sp8

avayaaura_conferencingMatch8.0sp9

avayaaura_experience_portalRange6.0–7.1

Node

avayaip_officeMatch8.1

avayaip_officeMatch9.1-

avayaip_officeMatch9.1sp1

avayaip_officeMatch9.1sp10

avayaip_officeMatch9.1sp11

avayaip_officeMatch9.1sp12

avayaip_officeMatch9.1sp3

avayaip_officeMatch9.1sp4

avayaip_officeMatch9.1sp5

avayaip_officeMatch9.1sp6

avayaip_officeMatch9.1sp7

avayaip_officeMatch9.1sp8

avayaip_officeMatch9.1sp9

avayaip_officeMatch10.0-

avayaip_officeMatch10.0sp1

avayaip_officeMatch10.0sp2

avayaip_officeMatch10.0sp3

avayaip_officeMatch10.0sp4

avayaip_officeMatch10.0sp5

avayaip_officeMatch10.0sp6

avayaip_officeMatch10.0sp7

Node

avayaaura_messagingMatch6.3

avayaaura_messagingMatch6.3.3-

avayaaura_messagingMatch6.3.3sp4

avayaaura_messagingMatch6.3.3sp5

avayaaura_messagingMatch6.3.3sp6

avayaaura_session_managerRange6.3–6.3.18

avayaaura_session_managerMatch7.0-

avayaaura_session_managerMatch7.0sp1

avayaaura_session_managerMatch7.0sp2

avayaaura_session_managerMatch7.0.1-

avayaaura_session_managerMatch7.0.1sp1

avayaaura_session_managerMatch7.0.1sp2

avayaaura_system_managerRange6.3–6.3.18

avayaaura_system_managerRange7.0–7.0.1.3

avayaaura_utility_servicesRange6.3–6.3.14

avayaaura_utility_servicesRange7.0–7.0.1.2

avayameeting_exchangeMatch6.2-

avayameeting_exchangeMatch6.2sp3

avayamessage_networkingRange5.2–6.3

avayaone-x_client_enablement_servicesMatch6.2-

avayaone-x_client_enablement_servicesMatch6.2sp1

avayaone-x_client_enablement_servicesMatch6.2sp2

avayaone-x_client_enablement_servicesMatch6.2sp5

avayaproactive_contactRange5.0–5.1.2

Node

avayasession_border_controller_for_enterprise_firmwareRange6.2–6.3

avayasession_border_controller_for_enterprise_firmwareRange7.0–7.1

AND

avayasession_border_controller_for_enterpriseMatch-

Node

avayaaura_system_platform_firmwareRange6.3–6.4.0

AND

avayaaura_system_platformMatch-

References

lists.opensuse.org/opensuse-security-announce/2016-12/msg00011.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00037.html

lists.opensuse.org/opensuse-security-announce/2016-12/msg00049.html

rhn.redhat.com/errata/RHSA-2016-2779.html

www.securityfocus.com/bid/94349

www.ubuntu.com/usn/USN-3163-1

bto.bluecoat.com/security-advisory/sa137

bugzilla.mozilla.org/show_bug.cgi?id=1306103

security.gentoo.org/glsa/201701-46

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.025 Low

EPSS

Percentile

90.2%

JSON

Related for NVD:CVE-2016-5285

redhatcve1 ubuntucve1 prion1 veracode1 cvelist1 cve1 debiancve1 redhat1 openvas9 nessus11 ibm11 symantec1 ubuntu1 centos1 amazon1 oraclelinux1 gentoo1 suse3 oracle1