Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2016-0704

An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.

  • Published: Mar 2, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-0704
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.9
  • AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
openssl / openssl 1.0.1j 1.0.1j.x
openssl / openssl 1.0.0n 1.0.0n.x
openssl / openssl 1.0.1-beta2 1.0.1-beta2.x
openssl / openssl 1.0.0c 1.0.0c.x
openssl / openssl 1.0.0i 1.0.0i.x
openssl / openssl 1.0.0-beta1 1.0.0-beta1.x
openssl / openssl 1.0.1h 1.0.1h.x
openssl / openssl 1.0.0-beta2 1.0.0-beta2.x
openssl / openssl 1.0.0m 1.0.0m.x
openssl / openssl 1.0.1c 1.0.1c.x
openssl / openssl 1.0.1g 1.0.1g.x
openssl / openssl 1.0.0h 1.0.0h.x
openssl / openssl 1.0.0-beta3 1.0.0-beta3.x
openssl / openssl 1.0.0e 1.0.0e.x
openssl / openssl 1.0.1-beta3 1.0.1-beta3.x
openssl / openssl 1.0.0f 1.0.0f.x
openssl / openssl 1.0.0d 1.0.0d.x
openssl / openssl 1.0.0j 1.0.0j.x
openssl / openssl 1.0.0p 1.0.0p.x
openssl / openssl 1.0.1a 1.0.1a.x
openssl / openssl 1.0.1-beta1 1.0.1-beta1.x
openssl / openssl 1.0.0o 1.0.0o.x
openssl / openssl 1.0.1d 1.0.1d.x
openssl / openssl 1.0.0k 1.0.0k.x
openssl / openssl 1.0.0-beta4 1.0.0-beta4.x
openssl / openssl 1.0.2-beta3 1.0.2-beta3.x
openssl / openssl 1.0.2-beta1 1.0.2-beta1.x
openssl / openssl 1.0.1k 1.0.1k.x
openssl / openssl 1.0.0 1.0.0.x
openssl / openssl 1.0.1b 1.0.1b.x
openssl / openssl 1.0.1e 1.0.1e.x
openssl / openssl 1.0.0-beta5 1.0.0-beta5.x
openssl / openssl 1.0.1l 1.0.1l.x
openssl / openssl 1.0.1f 1.0.1f.x
openssl / openssl 1.0.0l 1.0.0l.x
openssl / openssl 1.0.2 1.0.2.x
openssl / openssl 1.0.0a 1.0.0a.x
openssl / openssl 1.0.0q 1.0.0q.x
openssl / openssl 1.0.1i 1.0.1i.x
openssl / openssl 1.0.0b 1.0.0b.x
openssl / openssl 1.0.2-beta2 1.0.2-beta2.x
openssl / openssl 1.0.1 1.0.1.x
openssl / openssl 1.0.0g 1.0.0g.x
openssl / openssl - 0.9.8ze.x