CVE-2016-0800 Weak cryptography in n/a
Remote attackers can decrypt TLS ciphertext data by exploiting the SSLv2 protocol's Bleichenbacher RSA padding oracle vulnerability in OpenSSL.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-0800?
CVE-2016-0800 is a medium-severity vulnerability in Openssl Openssl, published on 1 Mar 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
Which versions are affected by CVE-2016-0800?
It affects 3 products.
Products include Openssl Openssl, Pulsesecure Client, Pulsesecure Steel Belted Radius.
How do I fix CVE-2016-0800?
Upgrade to a fixed version.
Is CVE-2016-0800 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-0800 exists.
Public exploit code: 1 Metasploit module and 1 proofs of concept on GitHub.
Other vulnerabilities in Openssl Openssl
Sources
Also known as CVE-2016-8000, DEBIAN-CVE-2016-0800, GHSA-fqw2-3v24-gc79.