CVE-2016-7056medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.
References
http://rhn.redhat.com/errata/RHSA-2017-1415.html
http://www.securityfocus.com/bid/95375
http://www.securitytracker.com/id/1037575
https://access.redhat.com/errata/RHSA-2017:1413
https://access.redhat.com/errata/RHSA-2017:1414
https://access.redhat.com/errata/RHSA-2017:1801
https://access.redhat.com/errata/RHSA-2017:1802
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7056
https://eprint.iacr.org/2016/1195
https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/033_libcrypto.patch.sig
https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/016_libcrypto.patch.sig
https://git.openssl.org/?p=openssl.git;a=commit;h=8aed2a7548362e88e84a7feb795a3a97e8395008
https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7056.html
https://seclists.org/oss-sec/2017/q1/52
Details
Source: MITRE
Published: 2018-09-10
Updated: 2019-10-09
Type: CWE-320
Risk Information
CVSS v2
Base Score: 2.1
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Impact Score: 2.9
Exploitability Score: 3.9
Severity: LOW
CVSS v3
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions up to 1.0.1u (inclusive)
Configuration 2
OR
Configuration 3
OR
Configuration 4
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 144773 | IBM HTTP Server 7.0.0.0 <= 7.0.0.43 / 8.0.0.0 <= 8.0.0.14 / 8.5.0.0 < 8.5.5.14 / 9.0.0.0 < 9.0.0.8 Multiple Vulnerabilities (569301) | Nessus | Web Servers | critical |
| 117316 | RHEL 6 : JBoss Core Services (RHSA-2017:1414) | Nessus | Red Hat Local Security Checks | high |
| 117315 | RHEL 7 : JBoss Core Services (RHSA-2017:1413) | Nessus | Red Hat Local Security Checks | high |
| 112177 | RHEL 6 / 7 : Red Hat JBoss Web Server 3.1.0 Service Pack 1 (RHSA-2017:1801) | Nessus | Red Hat Local Security Checks | critical |
| 106863 | openSUSE Security Update : openssl-steam (openSUSE-2018-168) | Nessus | SuSE Local Security Checks | critical |
| 106093 | SUSE SLES12 Security Update : openssl (SUSE-SU-2018:0112-1) | Nessus | SuSE Local Security Checks | critical |
| 100043 | openSUSE Security Update : libressl (openSUSE-2017-561) | Nessus | SuSE Local Security Checks | medium |
| 100042 | openSUSE Security Update : libressl (openSUSE-2017-560) | Nessus | SuSE Local Security Checks | medium |
| 99135 | Mac OS X Multiple Vulnerabilities (Security Update 2017-001 | Nessus | MacOS X Local Security Checks | critical |
| 99134 | macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy) | Nessus | MacOS X Local Security Checks | critical |
| 97550 | SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2017:0605-1) | Nessus | SuSE Local Security Checks | critical |
| 97494 | SUSE SLES11 Security Update : openssl (SUSE-SU-2017:0585-1) | Nessus | SuSE Local Security Checks | critical |
| 97275 | openSUSE Security Update : openssl (openSUSE-2017-255) | Nessus | SuSE Local Security Checks | critical |
| 97188 | SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2017:0461-1) | Nessus | SuSE Local Security Checks | critical |
| 97076 | openSUSE Security Update : libressl (openSUSE-2017-222) | Nessus | SuSE Local Security Checks | medium |
| 96931 | Debian DLA-814-1 : openssl security update | Nessus | Debian Local Security Checks | high |
| 96927 | Ubuntu 12.04 LTS / 14.04 LTS / 16.04 LTS / 16.10 : openssl vulnerabilities (USN-3181-1) | Nessus | Ubuntu Local Security Checks | critical |
| 96842 | Debian DSA-3773-1 : openssl - security update | Nessus | Debian Local Security Checks | high |
| 96412 | FreeBSD : openssl -- timing attack vulnerability (7caebe30-d7f1-11e6-a9a5-b499baebfeaf) | Nessus | FreeBSD Local Security Checks | medium |