Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
opensuse.org/opensuse-security-announce/2016-05/msg00021.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html - http://www.ubuntu.com/usn/USN-2964-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html - https://security.gentoo.org/glsa/201606-18 - http://rhn.redhat.com/errata/RHSA-2016-0716.html - http://www.securitytracker.com/id/1035596 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html - http://www.ubuntu.com/usn/USN-2963-1 - http://rhn.redhat.com/errata/R
opensuse-security-announce/2016-05/msg00027.html - http://www.ubuntu.com/usn/USN-2963-1 - http://rhn.redhat.com/errata/RHSA-2016-0675.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html - http://rhn.redhat.com/errata/RHSA-2016-0702.html - http://rhn.redhat.com/errata/RHSA-2016-0679.html - https://access.redhat.com/errata/RHSA-2017:1216 - http://www.debian.org/security/2016/dsa-3558 - http://rhn.redhat.com/errata/RHSA-2016-0678.html - http://rhn.redhat.com/errata/RHSA-2016-0650.html
CVE ID: CVE-2016-0688 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:10:01.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/86469 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securitytracker.com/id/1035615
CVE ID: CVE-2016-0689 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:09:52.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0692, CVE-2016-0694, and CVE-2016-3418. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0690 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:09:37.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0691. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035590 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0691 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:09:25.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0690. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035590 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0692 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:09:17.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0694, and CVE-2016-3418. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0693 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:09:07.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035629 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0694 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:08:57.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682, CVE-2016-0689, CVE-2016-0692, and CVE-2016-3418. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0695 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:08:50.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html - http://rhn.redhat.com/errata/RHSA-2016-0677.html - http://www.ubuntu.com/usn/USN-2972-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htm
ttp://www.ubuntu.com/usn/USN-2972-1 - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html - http://rhn.redhat.com/errata/RHSA-2016-0676.html - https://security.netapp.com/advisory/ntap-20160420-0001/ - http://rhn.redhat.com/errata/RHSA-2016-0723.html - http://rhn.redhat.com/errata/RHSA-2016-0651.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html - http://www.securityfocus.com/bid/86438 - https://kc.mcafee.com/corporate/index?page=content&id=SB10159 - http://www.ubuntu.com/usn/US
curityfocus.com/bid/86438 - https://kc.mcafee.com/corporate/index?page=content&id=SB10159 - http://www.ubuntu.com/usn/USN-2964-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html - https://security.gentoo.org/glsa/201606-18 - http://www.securitytracker.com/id/1035596 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html - http://www.ubuntu.com/usn/USN-2963-1 - http://rhn.redhat.com/errata/RHSA-2016-0675.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html - http://rhn.redhat.com/errata/RHSA-2016-0679.html - http://www.debian.org/securi
ecurity-announce/2016-05/msg00022.html - http://rhn.redhat.com/errata/RHSA-2016-0679.html - http://www.debian.org/security/2016/dsa-3558 - http://rhn.redhat.com/errata/RHSA-2016-0678.html - http://rhn.redhat.com/errata/RHSA-2016-0650.html
CVE ID: CVE-2016-0696 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:08:41.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securityfocus.com/bid/86443 - http://www.securitytracker.com/id/1035615
CVE ID: CVE-2016-0697 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:08:30.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows local users to affect confidentiality and integrity via unknown vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securitytracker.com/id/1035603
CVE ID: CVE-2016-0698 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:08:23.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to Rich Text Editor, a different vulnerability than CVE-2016-3423. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035610 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0699 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:08:16.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors related to the Login sub-component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1035604 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
CVE ID: CVE-2016-0700 State: PUBLISHED Published: 2016-04-21T10:00:00 Last Updated: 2024-10-15T19:08:08.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/86453 - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://www.securitytracker.com/id/1035615
CVE ID: CVE-2016-0701 State: PUBLISHED Published: 2016-02-15T00:00:00 Last Updated: 2024-08-05T22:30:03.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html - http://
am Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.html - http://www.securitytracker.com/id/1034849 - https://security.gentoo.org/glsa/201601-05 - http://www.securityfocus.com/bid/82233 - http://www.securityfocus.com/bid/91787 - https://www.kb.cert.org/vuls/id/257823 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://www.ubuntu.com/usn/USN-2883-1 - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://ww
chnetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c5b831f21d0d29d1e517d139d9d101763f60c9a2 - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=878e2c5b13010329c203f309ed0c8f2113f85648 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164821 - http://www.openssl.org/news/secadv/20160128.txt - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893 - http://
ct2017-3236626.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390893 - http://intothesymmetry.blogspot.com/2016/01/openssl-key-recovery-attack-on-dh-small.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03724en_us - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://www.oracle.com/security-alerts/cpuoct2020.html - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0702 State: PUBLISHED Published: 2016-03-03T00:00:00 Last Updated: 2024-08-05T22:30:03.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a "CacheBleed" attack. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announc
dditional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-286720
/advisories/FreeBSD-SA-16:12.openssl.asc - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - http://marc.info/?l=bugtraq&m=145889460330120&w=2 - http://www.ubuntu.com/usn/USN-2914-1 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - http://lists.opensu
unce/2016-06/msg00019.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html - http://openssl.org/news/secadv/20160301.txt - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - http://www.debian.org/security/2016/dsa-3500 - https://h2
pensuse.org/opensuse-security-announce/2016-03/msg00004.html - http://www.debian.org/security/2016/dsa-3500 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - https://www.openssl.org/news/secadv/20160301.txt - http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html -
lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html - http://rhn.redhat.com/errata/RHSA-2016-2957.html - https://security.gentoo.org/glsa/201603-15 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - http://cachebleed.info - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=708dc2f1291e104fe4eef810bb8ffc1fae5b19c1 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-03
suse.org/opensuse-security-announce/2016-03/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0703 State: PUBLISHED Published: 2016-03-02T00:00:00 Last Updated: 2024-08-05T22:30:03.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/
related issue to CVE-2016-0800. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://www.securityfocus.com/bid/83743 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://kb.pul
lletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - https://drownattack.com - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97 - http://openssl.org/news/secadv/20160301.txt - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441 - https://h20
3/msg00004.html - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html - https://www.openssl.org/news/secadv/20160301.txt - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html - https://security.gentoo.org/glsa/201603-15 - http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - http://lists.opensuse.org/opensuse-sec
rity-announce/2016-03/msg00006.html - http://www.securitytracker.com/id/1035133 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759 - https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18 - https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
CVE ID: CVE-2016-0704 State: PUBLISHED Published: 2016-03-02T00:00:00 Last Updated: 2024-08-05T22:30:03.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwo
issue to CVE-2016-0800. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc - http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html - http://www.securityfocus.com/bid/83764 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://kb.pulsesecure.
2016-2952098.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168 - https://drownattack.com - https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=ae50d8270026edf5b3c7f8aaa0c6677462b33d97 - http://openssl.org/news/secadv/20160301.txt - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us - http://lis