NetSight
IP …
medium5.9Public exploit code

CVE-2016-2107

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows rem…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop
Versions 7.0, 6.0
RedhatEnterprise Linux Hpc Node
Versions 7.0, 6.0
RedhatEnterprise Linux Hpc Node Eus
Version 7.2
RedhatEnterprise Linux Server
Versions 7.0, 6.0
RedhatEnterprise Linux Server Aus
Version 7.2
RedhatEnterprise Linux Server Eus
Version 7.2
RedhatEnterprise Linux Workstation
Versions 7.0, 6.0
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
OpensslOpenssl
through 1.0.1s
Versions 1.0.2, 1.0.2a, 1.0.2b, 1.0.2c, 1.0.2d
GoogleAndroid
Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1
HpHelion Openstack
Versions 2.0.0, 2.1.0, 2.1.2, 2.1.4

Weakness classification

CWE-200CWE-310

References