CVE-2016-0704

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-0704
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-0704.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-0704
Downstream
Related
Published
2016-03-02T11:59:01.363Z
Modified
2026-04-11T19:41:12.396898Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An oracle protection mechanism in the getclientmasterkey function in s2srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c2ef67100cd0ca2321b5f1a437abb93fc7e11e37
Last affected
ce052c8437fb97cbc57f034fa94b5bcd749dbf52
Last affected
e614ec476957b0b09a2b302c3d68003ed8395ed5
Last affected
d8faad27b70ccab9aad1a4af815f4d07cc5da1b5
Last affected
65fc4c55bea222e4ba542b383a32bdc7534e058b
Last affected
56327ebe6a7675001b382ca5e5531c598e1b2261
Last affected
bc0ecd202ab37f02b9d7dd610cbb0cf98db9fb52
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Last affected
ab585551c0a577d9a91825d446465905a5ea17e3
Last affected
e2dfb655f798831ffb29242ad804013ddb0c5d5b
Last affected
08e4c7a967cc9d82264d125440d8b17b912bd250
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Last affected
94f416601754dbe65e287f8e1eca01fa32f74a7a
Last affected
2f63ad1c6daa61614f3d58de0889bf68e9f75853
Last affected
2c5db8dac3a06fe5b2c889838a606138ee3542ed
Database specific 
{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.9.8ze"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "last_affected": "1.0.0-beta1"
        },
        {
            "last_affected": "1.0.0-beta2"
        },
        {
            "last_affected": "1.0.0-beta3"
        },
        {
            "last_affected": "1.0.0-beta4"
        },
        {
            "last_affected": "1.0.0-beta5"
        },
        {
            "last_affected": "1.0.0a"
        },
        {
            "last_affected": "1.0.0b"
        },
        {
            "last_affected": "1.0.0c"
        },
        {
            "last_affected": "1.0.0d"
        },
        {
            "last_affected": "1.0.0e"
        },
        {
            "last_affected": "1.0.0f"
        },
        {
            "last_affected": "1.0.0g"
        },
        {
            "last_affected": "1.0.0h"
        },
        {
            "last_affected": "1.0.0i"
        },
        {
            "last_affected": "1.0.0j"
        },
        {
            "last_affected": "1.0.0k"
        },
        {
            "last_affected": "1.0.0l"
        },
        {
            "last_affected": "1.0.0m"
        },
        {
            "last_affected": "1.0.0n"
        },
        {
            "last_affected": "1.0.0o"
        },
        {
            "last_affected": "1.0.0p"
        },
        {
            "last_affected": "1.0.0q"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "last_affected": "1.0.1-beta1"
        },
        {
            "last_affected": "1.0.1-beta2"
        },
        {
            "last_affected": "1.0.1-beta3"
        },
        {
            "last_affected": "1.0.1a"
        },
        {
            "last_affected": "1.0.1b"
        },
        {
            "last_affected": "1.0.1c"
        },
        {
            "last_affected": "1.0.1d"
        },
        {
            "last_affected": "1.0.1e"
        },
        {
            "last_affected": "1.0.1f"
        },
        {
            "last_affected": "1.0.1g"
        },
        {
            "last_affected": "1.0.1h"
        },
        {
            "last_affected": "1.0.1i"
        },
        {
            "last_affected": "1.0.1j"
        },
        {
            "last_affected": "1.0.1k"
        },
        {
            "last_affected": "1.0.1l"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "last_affected": "1.0.2-beta1"
        },
        {
            "last_affected": "1.0.2-beta2"
        },
        {
            "last_affected": "1.0.2-beta3"
        }
    ],
    "cpe": [
        "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*"
    ]
}

Affected versions

Other
BEFORE_engine
OpenSSL_0_9_1c
OpenSSL_0_9_2b
OpenSSL_0_9_3
OpenSSL_0_9_3a
OpenSSL_0_9_3beta2
OpenSSL_0_9_4
OpenSSL_0_9_5a
OpenSSL_0_9_5a-beta1
OpenSSL_0_9_5a-beta2
OpenSSL_0_9_5beta1
OpenSSL_0_9_5beta2
OpenSSL_0_9_6-beta3
OpenSSL_0_9_8
OpenSSL_0_9_8-beta1
OpenSSL_0_9_8-beta2
OpenSSL_0_9_8-beta4
OpenSSL_0_9_8-beta5
OpenSSL_0_9_8-beta6
OpenSSL_0_9_8-post-auto-reformat
OpenSSL_0_9_8-post-reformat
OpenSSL_0_9_8-pre-auto-reformat
OpenSSL_0_9_8-pre-reformat
OpenSSL_0_9_8a
OpenSSL_0_9_8b
OpenSSL_0_9_8c
OpenSSL_0_9_8d
OpenSSL_0_9_8e
OpenSSL_0_9_8h
OpenSSL_0_9_8i
OpenSSL_0_9_8j
OpenSSL_0_9_8m
OpenSSL_0_9_8m-beta1
OpenSSL_0_9_8n
OpenSSL_0_9_8o
OpenSSL_0_9_8p
OpenSSL_0_9_8q
OpenSSL_0_9_8r
OpenSSL_0_9_8s
OpenSSL_0_9_8t
OpenSSL_0_9_8u
OpenSSL_0_9_8v
OpenSSL_0_9_8w
OpenSSL_0_9_8x
OpenSSL_0_9_8y
OpenSSL_0_9_8za
OpenSSL_0_9_8zb
OpenSSL_0_9_8zc
OpenSSL_0_9_8zd
OpenSSL_0_9_8ze
OpenSSL_0_9_8zf
OpenSSL_0_9_8zg
OpenSSL_0_9_8zh
OpenSSL_1_0_0
OpenSSL_1_0_0-beta1
OpenSSL_1_0_0-beta2
OpenSSL_1_0_0-beta3
OpenSSL_1_0_0-beta4
OpenSSL_1_0_0-beta5
OpenSSL_1_0_0-post-auto-reformat
OpenSSL_1_0_0-post-reformat
OpenSSL_1_0_0-pre-auto-reformat
OpenSSL_1_0_0-pre-reformat
OpenSSL_1_0_0a
OpenSSL_1_0_0b
OpenSSL_1_0_0c
OpenSSL_1_0_0d
OpenSSL_1_0_0e
OpenSSL_1_0_0f
OpenSSL_1_0_0g
OpenSSL_1_0_0h
OpenSSL_1_0_0i
OpenSSL_1_0_0j
OpenSSL_1_0_0k
OpenSSL_1_0_0l
OpenSSL_1_0_0m
OpenSSL_1_0_0n
OpenSSL_1_0_0o
OpenSSL_1_0_0p
OpenSSL_1_0_0q
OpenSSL_1_0_0r
OpenSSL_1_0_0s
OpenSSL_1_0_0t
OpenSSL_1_0_1
OpenSSL_1_0_1-beta1
OpenSSL_1_0_1-beta2
OpenSSL_1_0_1-beta3
OpenSSL_1_0_1-post-auto-reformat
OpenSSL_1_0_1-post-reformat
OpenSSL_1_0_1-pre-auto-reformat
OpenSSL_1_0_1-pre-reformat
OpenSSL_1_0_1a
OpenSSL_1_0_1b
OpenSSL_1_0_1c
OpenSSL_1_0_1d
OpenSSL_1_0_1e
OpenSSL_1_0_1f
OpenSSL_1_0_1g
OpenSSL_1_0_1h
OpenSSL_1_0_1i
OpenSSL_1_0_1j
OpenSSL_1_0_1k
OpenSSL_1_0_1l
OpenSSL_1_0_1m
OpenSSL_1_0_1n
OpenSSL_1_0_1o
OpenSSL_1_0_1p
OpenSSL_1_0_1q
OpenSSL_1_0_1r
OpenSSL_1_0_1s
OpenSSL_1_0_1t
OpenSSL_1_0_1u
OpenSSL_1_0_2
OpenSSL_1_0_2-beta1
OpenSSL_1_0_2-beta2
OpenSSL_1_0_2-beta3
OpenSSL_1_0_2-post-auto-reformat
OpenSSL_1_0_2-post-reformat
OpenSSL_1_0_2-pre-auto-reformat
OpenSSL_1_0_2-pre-reformat
OpenSSL_1_0_2a
OpenSSL_1_0_2b
OpenSSL_1_0_2c
OpenSSL_1_0_2d
OpenSSL_1_0_2e
OpenSSL_1_0_2f
OpenSSL_1_0_2g
OpenSSL_1_0_2h
OpenSSL_1_0_2i
OpenSSL_1_0_2j
OpenSSL_1_0_2k
OpenSSL_1_0_2l
OpenSSL_1_0_2m
OpenSSL_1_0_2n
OpenSSL_1_0_2o
OpenSSL_1_0_2p
OpenSSL_1_0_2q
OpenSSL_1_0_2r
OpenSSL_1_0_2s
OpenSSL_1_0_2t
OpenSSL_1_0_2u

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-0704.json"