medium5.9
CVE-2017-17428
Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenba…
Impact
Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cavium | Nitrox Ssl Sdk | through 6.1.0 |
| Cavium | Nitrox V Ssl Sdk | through 1.2 |
| Cavium | Octeon Sdk | through 1.7.2 |
| Cavium | Octeon Ssl Sdk | through 1.5.0 |
| Cavium | Turbossl Sdk | through 1.0 |
| Cisco | Webex Conect Im | Version 7.24.1 |
| Cisco | Webex Meetings | Versions t31, t32 |
| Cisco | Ace4710 Application Control Engine Firmware | Versions 3.0\(0\)a5\(2.0\), 3.0\(0\)a5\(3.0\), 3.0\(0\)a5\(3.5\) |
| Cisco | Ace30 Application Control Engine Module Firmware | Versions 3.0\(0\)a5\(2.0\), 3.0\(0\)a5\(3.0\), 3.0\(0\)a5\(3.5\) |
| Cisco | Adaptive Security Appliance 5520 Firmware | Version 9.1\(7.16\) |
| Cisco | Adaptive Security Appliance 5540 Firmware | Version 9.1\(7.16\) |
| Cisco | Adaptive Security Appliance 5550 Firmware | Version 9.1\(7.16\) |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102170
- http://www.securitytracker.com/id/1039984
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher
- https://www.cavium.com/security-advisory-cve-2017-17428.html
- https://www.kb.cert.org/vuls/id/144389
- http://www.securityfocus.com/bid/102170
- http://www.securitytracker.com/id/1039984
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171212-bleichenbacher
- https://www.cavium.com/security-advisory-cve-2017-17428.html
- https://www.kb.cert.org/vuls/id/144389