WID-SEC-W-2024-0214
Vulnerability from csaf_certbund - Published: 2016-06-09 22:00 - Updated: 2024-08-28 22:00Es existiert eine Integerüberlauf Schwachstelle in OpenSSL. Diese Schwachstelle beruht auf mehren undefinierten "pointer arithmetic" in den Funktionen [ssl/s3_srvr.c, ssl/ssl_sess.c und ssl/t1_lib.c]. Ein entfernter anonymer Angreifer kann diese Schwachstelle mit bisher unbekannten Auswirkungen ausnutzen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IP Phone
Cisco
|
cpe:/h:cisco:ip_phone:-
|
— | |
|
Cisco ONS
Cisco
|
cpe:/h:cisco:ons:-
|
— | |
|
Cisco WebEx Meetings Server
Cisco
|
cpe:/a:cisco:webex_meetings_server:-
|
— | |
|
Cisco Unified IP Phone
Cisco
|
cpe:/h:cisco:unified_ip_phones:-
|
— | |
|
FreeBSD Project FreeBSD OS 9
FreeBSD Project / FreeBSD OS
|
cpe:/o:freebsd:freebsd:9.0
|
9 | |
|
Juniper Junos Space
Juniper
|
cpe:/a:juniper:junos_space:-
|
— | |
|
Juniper ScreenOS
Juniper
|
cpe:/o:juniper:screenos:-
|
— | |
|
Cisco Aironet Access Point
Cisco
|
cpe:/o:cisco:aironet_access_point_software:-
|
— | |
|
Cisco Unified MeetingPlace (MP)
Cisco
|
cpe:/a:cisco:unified_meetingplace:-
|
— | |
|
Blue Coat ProxySG 6.5
Blue Coat / ProxySG
|
cpe:/h:bluecoat:proxysg:6.5
|
6.5 | |
|
Cisco Packet Tracer
Cisco
|
cpe:/a:cisco:packet_tracer:-
|
— | |
|
Blue Coat ProxySG 6.6
Blue Coat / ProxySG
|
cpe:/h:bluecoat:proxysg:6.6
|
6.6 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Cisco Unity Connection
Cisco
|
cpe:/a:cisco:unity_connection:-
|
— | |
|
Cisco Prime Infrastructure
Cisco
|
cpe:/a:cisco:prime_infrastructure:-
|
— | |
|
F5 WebAccelerator
F5
|
cpe:/h:f5:big-ip_webaccelerator:-
|
— | |
|
F5 WAN Optimization Manager
F5
|
cpe:/a:f5:big-ip_wan_optimization_manager:-
|
— | |
|
Juniper JUNOS
Juniper
|
cpe:/o:juniper:junos:-
|
— | |
|
F5 BIG-IP Analytics
F5
|
cpe:/a:f5:big-ip_analytics:-
|
— | |
|
F5 BIG-IP Edge Gateway
F5
|
cpe:/a:f5:big-ip_edge_gateway:-
|
— | |
|
Cisco WebEx Node for MCS
Cisco
|
cpe:/a:cisco:webex_node_for_mcs:-
|
— | |
|
Cisco Prime Collaboration
Cisco
|
cpe:/a:cisco:prime_collaboration:-
|
— | |
|
Cisco Show and Share
Cisco
|
cpe:/a:cisco:show_and_share:-
|
— | |
|
FreeBSD Project FreeBSD OS 11-11.0
FreeBSD Project / FreeBSD OS
|
cpe:/o:freebsd:freebsd:11
|
11-11.0 | |
|
F5 BIG-IP Access Policy Manager
F5
|
cpe:/a:f5:big-ip_access_policy_manager:-
|
— | |
|
Cisco Nexus 2000
Cisco
|
cpe:/h:cisco:nexus:3000
|
— | |
|
Cisco Nexus 7000
Cisco
|
cpe:/h:cisco:nexus_7000:-
|
— | |
|
Open Source OpenSSL
Open Source
|
cpe:/a:openssl:openssl:-
|
— | |
|
Cisco Nexus 5000
Cisco
|
cpe:/h:cisco:nexus_5000:-
|
— | |
|
Cisco ACE
Cisco
|
cpe:/a:cisco:application_control_engine_software:-
|
— | |
|
Cisco IOS
Cisco
|
cpe:/o:cisco:ios:-
|
— | |
|
F5 BIG-IP Application Security Manager
F5
|
cpe:/a:f5:big-ip_application_security_manager:-
|
— | |
|
Cisco Small Business 300 Series Managed Switches
Cisco
|
cpe:/h:cisco:small_business_300_series_managed_switches:-
|
— | |
|
Cisco Emergency Responder
Cisco
|
cpe:/a:cisco:emergency_responder:-
|
— | |
|
Cisco Network Analysis Module
Cisco
|
cpe:/h:cisco:network_analysis_module:-
|
— | |
|
Dell NetWorker <19.10
Dell / NetWorker
|
<19.10 | ||
|
Cisco IOS XE
Cisco
|
cpe:/o:cisco:ios_xe:-
|
— | |
|
Cisco AnyConnect Secure Mobility Solution
Cisco
|
cpe:/a:cisco:anyconnect_secure_mobility_client:-
|
— | |
|
Cisco Security Manager (CSM)
Cisco
|
cpe:/a:cisco:security_manager:-
|
— | |
|
F5 BIG-IP Link Controller
F5
|
cpe:/a:f5:big-ip_link_controller:-
|
— | |
|
Cisco WebEx Meeting Center
Cisco
|
cpe:/a:cisco:webex_meeting_center:-
|
— | |
|
Blue Coat ProxyAV 3.5
Blue Coat / ProxyAV
|
cpe:/h:bluecoat:proxyav:3.5
|
3.5 | |
|
F5 BIG-IP Global Traffic Manager
F5
|
cpe:/a:f5:big-ip_global_traffic_manager:-
|
— | |
|
Cisco Unified Contact Center Express (UCCX)
Cisco
|
cpe:/h:cisco:unified_contact_center_express:-
|
— | |
|
Ubuntu Linux 16.04 LTS
Ubuntu / Linux
|
cpe:/o:canonical:ubuntu_linux:16.04_lts
|
16.04 LTS | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Ubuntu Linux 14.04 LTS
Ubuntu / Linux
|
cpe:/o:canonical:ubuntu_linux:14.04:-:lts
|
14.04 LTS | |
|
Cisco Intrusion Prevention System (IPS)
Cisco
|
cpe:/h:cisco:intrusion_prevention_system:-
|
— | |
|
SUSE Linux Enterprise Server
SUSE
|
cpe:/o:suse:linux_enterprise_server:-
|
— | |
|
Cisco Unified Communications Domain Manager (CUCDM)
Cisco
|
cpe:/a:cisco:unified_communications_domain_manager:-
|
— | |
|
Cisco Application Networking Manager
Cisco
|
cpe:/a:cisco:application_networking_manager:-
|
— | |
|
Cisco Secure Access Control Server (ACS)
Cisco
|
cpe:/a:cisco:secure_access_control_server:-
|
— | |
|
Cisco Unity Express
Cisco
|
cpe:/h:cisco:unity_express:-
|
— | |
|
F5 ARX
F5
|
cpe:/a:f5:arx:-
|
— | |
|
Cisco MDS 9000
Cisco
|
cpe:/o:cisco:mds_9000:-
|
— | |
|
Cisco Advanced Malware Protection
Cisco
|
cpe:/h:cisco:advanced_malware_protection:-
|
— | |
|
Cisco TelePresence
Cisco
|
cpe:/h:cisco:telepresence:-
|
— | |
|
Xerox Phaser
Xerox
|
cpe:/h:xerox:phaser:-
|
— | |
|
FreeBSD Project FreeBSD OS 10-10.3
FreeBSD Project / FreeBSD OS
|
cpe:/o:freebsd:freebsd:10.3
|
10-10.3 | |
|
F5 BIG-IP Local Traffic Manager
F5
|
cpe:/a:f5:big-ip_local_traffic_manager:-
|
— | |
|
Cisco Nexus 6000
Cisco
|
cpe:/h:cisco:nexus_6000:-
|
— | |
|
Cisco Nexus 9000
Cisco
|
cpe:/h:cisco:nexus_9000:-
|
— | |
|
Cisco Unified Contact Center Enterprise
Cisco
|
cpe:/a:cisco:unified_contact_center_enterprise:-
|
— | |
|
Cisco Unified Communications Manager (CUCM)
Cisco
|
cpe:/a:cisco:unified_communications_manager:-
|
— | |
|
Cisco Wide Area Application Services
Cisco
|
cpe:/a:cisco:wide_area_application_services:-
|
— | |
|
Cisco Nexus 1000V
Cisco
|
cpe:/h:cisco:nexus_1000v:-
|
— | |
|
Xerox FreeFlow Print Server
Xerox
|
cpe:/a:xerox:freeflow_print_server:-
|
— | |
|
Cisco Video Surveillance
Cisco
|
cpe:/a:cisco:video_surveillance_software:-
|
— | |
|
Cisco Email Security Appliance
Cisco
|
cpe:/h:cisco:email_security_appliance:-
|
— | |
|
Ubuntu Linux 12.04 LTS
Ubuntu / Linux
|
cpe:/o:canonical:ubuntu_linux:12.04:-:lts
|
12.04 LTS | |
|
F5 Enterprise Manager
F5
|
cpe:/a:f5:enterprise_manager:-
|
— | |
|
Cisco Digital Media Manager
Cisco
|
cpe:/a:cisco:digital_media_manager:-
|
— | |
|
F5 BIG-IP Protocol Security Manager
F5
|
cpe:/a:f5:protocol_security_manager:-
|
— | |
|
FreeBSD Project FreeBSD OS 9.3
FreeBSD Project / FreeBSD OS
|
cpe:/o:freebsd:freebsd:9.3
|
9.3 | |
|
Cisco Wireless LAN Controllers
Cisco
|
cpe:/a:cisco:wireless_lan_controllers:-
|
— |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "OpenSSL ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Appliance\n- CISCO Appliance\n- F5 Networks\n- Juniper Appliance\n- Linux\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0214 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2016/wid-sec-w-2024-0214.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0214 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0214"
},
{
"category": "external",
"summary": "Mailing list OSS-Security vom 2016-06-09",
"url": "http://seclists.org/oss-sec/2016/q2/500"
},
{
"category": "external",
"summary": "Eintrag auf cxsecutity",
"url": "https://cxsecurity.com/issue/WLB-2016060056"
},
{
"category": "external",
"summary": "F5 Security Advisory sol23873366 vom 2016-07-14",
"url": "https://support.f5.com/kb/en-us/solutions/public/k/23/sol23873366.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-3673 vom 2016-09-22",
"url": "https://www.debian.org/security/2016/dsa-3673"
},
{
"category": "external",
"summary": "FreeBSD Security Advisory FREEBSD-SA-16:26.OPENSSL vom 2016-09-23",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3087-2 vom 2016-09-23",
"url": "http://www.ubuntu.com/usn/usn-3087-2/"
},
{
"category": "external",
"summary": "SUSE Security Update Announcement ID SUSE-SU-2016:2387-1",
"url": "https://www.suse.com/de-de/support/update/announcement/2016/suse-su-20162387-1.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27",
"url": "https://access.redhat.com/errata/RHSA-2016:1940"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2016:2394-1 vom 2016-09-27",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162394-1.html"
},
{
"category": "external",
"summary": "CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-09-27",
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory\u0026vs_cat=Security%20Intelligence\u0026vs_type=RSS\u0026vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016\u0026vs_k=1"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2016:2458-1 vom 2016-10-05",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162458-1.html"
},
{
"category": "external",
"summary": "Blue Coat Security Advisory sa13 vom 2016-10-06",
"url": "https://kb.bluecoat.com/security-advisory/sa132"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2016:2468-1 vom 2016-10-07",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162468-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2016:2469-1 vom 2016-10-07",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162469-1.html"
},
{
"category": "external",
"summary": "Juniper Security Bulletin JSA10759 vom 2016-10-14",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"category": "external",
"summary": "Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19",
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl?vs_f=Cisco%20Security%20Advisory\u0026vs_cat=Security%20Intelligence\u0026vs_type=RSS\u0026vs_p=Multiple%20Vulnerabilities%20in%20OpenSSL%20Affecting%20Cisco%20Products:%20September%202016\u0026vs_k=1"
},
{
"category": "external",
"summary": "BLUECOAT Security Advisory SA135 vom 2016-12-01",
"url": "https://bto.bluecoat.com/security-advisory/sa135"
},
{
"category": "external",
"summary": "Xerox Mini Bulletin XRX16AF vom 2016-12-04",
"url": "https://www.xerox.com/download/security/security-bulletin/1cf9a-54159c674d1b0/cert_Security_Mini-_Bulletin_XRX16AF_for_PH3635_v1-0.pdf"
},
{
"category": "external",
"summary": "RedHat Security Advisory RHSA-2016-2957",
"url": "https://rhn.redhat.com/errata/RHSA-2016-2957.html"
},
{
"category": "external",
"summary": "BLUECOAT Security Advisory SA137 vom 2016-12-20",
"url": "https://bto.bluecoat.com/security-advisory/sa137"
},
{
"category": "external",
"summary": "Juniper Security Advisory JSA10774 vom 2017-01-12",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10774"
},
{
"category": "external",
"summary": "Juniper Security Advisory JSA10770 vom 2017-01-12",
"url": "http://www.auscert.org.au/render.html?it=42842"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3181-1 vom 2017-01-31",
"url": "http://www.ubuntu.com/usn/usn-3181-1/"
},
{
"category": "external",
"summary": "Xerox Mini Bulletin XRX17B vom 2017-02-17",
"url": "https://www.xerox.com/download/security/security-bulletin/1d0db-548bbb1d41f71/cert_Security_Mini-_Bulletin_XRX17B_for_WC4260_v1-0.pdf"
},
{
"category": "external",
"summary": "Xerox Security Bulletin XRX17-006 vom 2017-03-08",
"url": "https://www.xerox.com/download/security/security-bulletin/2efe6-54a395387fa39/cert_XRX17-006_FFPSv8_UpdateManager_Mar2017.pdf"
},
{
"category": "external",
"summary": "Xerox Security Bulletin XRX17-005 vom 2017-03-08",
"url": "https://www.xerox.com/download/security/security-bulletin/312e6-54a3954424112/cert_XRX17-005_FFPSv7_v9_UpdateManager_Mar2017.pdf"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2017:1658 vom 2017-06-29",
"url": "https://access.redhat.com/errata/RHSA-2017:1658"
},
{
"category": "external",
"summary": "McAfee Security Bulletin:SB10215",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10215"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16",
"url": "http://linux.oracle.com/errata/ELSA-2019-4747.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01",
"url": "https://linux.oracle.com/errata/ELSA-2021-9150.html"
},
{
"category": "external",
"summary": "Dell Knowledge Base Article",
"url": "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities"
}
],
"source_lang": "en-US",
"title": "OpenSSL: Schwachstelle erm\u00f6glicht nicht spezifizierten Angriff",
"tracking": {
"current_release_date": "2024-08-28T22:00:00.000+00:00",
"generator": {
"date": "2024-08-29T10:08:22.177+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.6"
}
},
"id": "WID-SEC-W-2024-0214",
"initial_release_date": "2016-06-09T22:00:00.000+00:00",
"revision_history": [
{
"date": "2016-06-09T22:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2016-06-09T22:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-07-14T22:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2016-07-14T22:00:00.000+00:00",
"number": "4",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-09-22T22:00:00.000+00:00",
"number": "5",
"summary": "New remediations available"
},
{
"date": "2016-09-25T22:00:00.000+00:00",
"number": "6",
"summary": "New remediations available"
},
{
"date": "2016-09-25T22:00:00.000+00:00",
"number": "7",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-09-26T22:00:00.000+00:00",
"number": "8",
"summary": "New remediations available"
},
{
"date": "2016-09-26T22:00:00.000+00:00",
"number": "9",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-09-27T22:00:00.000+00:00",
"number": "10",
"summary": "New remediations available"
},
{
"date": "2016-09-27T22:00:00.000+00:00",
"number": "11",
"summary": "New remediations available"
},
{
"date": "2016-10-05T22:00:00.000+00:00",
"number": "12",
"summary": "New remediations available"
},
{
"date": "2016-10-05T22:00:00.000+00:00",
"number": "13",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-06T22:00:00.000+00:00",
"number": "14",
"summary": "New remediations available"
},
{
"date": "2016-10-06T22:00:00.000+00:00",
"number": "15",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-06T22:00:00.000+00:00",
"number": "16",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-06T22:00:00.000+00:00",
"number": "17",
"summary": "New remediations available"
},
{
"date": "2016-10-06T22:00:00.000+00:00",
"number": "18",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "19",
"summary": "New remediations available"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "20",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "21",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "22",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "23",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "24",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "25",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-10-16T22:00:00.000+00:00",
"number": "26",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-11-30T23:00:00.000+00:00",
"number": "27",
"summary": "New remediations available"
},
{
"date": "2016-11-30T23:00:00.000+00:00",
"number": "28",
"summary": "Version nicht vorhanden"
},
{
"date": "2016-12-18T23:00:00.000+00:00",
"number": "29",
"summary": "New remediations available"
},
{
"date": "2016-12-20T23:00:00.000+00:00",
"number": "30",
"summary": "New remediations available"
},
{
"date": "2017-01-11T23:00:00.000+00:00",
"number": "31",
"summary": "New remediations available"
},
{
"date": "2017-01-31T23:00:00.000+00:00",
"number": "32",
"summary": "New remediations available"
},
{
"date": "2017-02-19T23:00:00.000+00:00",
"number": "33",
"summary": "New remediations available"
},
{
"date": "2017-03-08T23:00:00.000+00:00",
"number": "34",
"summary": "New remediations available"
},
{
"date": "2017-03-08T23:00:00.000+00:00",
"number": "35",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-03-08T23:00:00.000+00:00",
"number": "36",
"summary": "New remediations available"
},
{
"date": "2017-06-28T22:00:00.000+00:00",
"number": "37",
"summary": "New remediations available"
},
{
"date": "2017-06-28T22:00:00.000+00:00",
"number": "38",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-12-07T23:00:00.000+00:00",
"number": "39",
"summary": "New remediations available"
},
{
"date": "2019-08-18T22:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2021-03-31T22:00:00.000+00:00",
"number": "41",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-01-25T23:00:00.000+00:00",
"number": "42",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-08-28T22:00:00.000+00:00",
"number": "43",
"summary": "CPE Zuordnungen korrigiert"
}
],
"status": "final",
"version": "43"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "3.5",
"product": {
"name": "Blue Coat ProxyAV 3.5",
"product_id": "T003290",
"product_identification_helper": {
"cpe": "cpe:/h:bluecoat:proxyav:3.5"
}
}
}
],
"category": "product_name",
"name": "ProxyAV"
},
{
"branches": [
{
"category": "product_version",
"name": "6.6",
"product": {
"name": "Blue Coat ProxySG 6.6",
"product_id": "T006617",
"product_identification_helper": {
"cpe": "cpe:/h:bluecoat:proxysg:6.6"
}
}
},
{
"category": "product_version",
"name": "6.5",
"product": {
"name": "Blue Coat ProxySG 6.5",
"product_id": "T006618",
"product_identification_helper": {
"cpe": "cpe:/h:bluecoat:proxysg:6.5"
}
}
}
],
"category": "product_name",
"name": "ProxySG"
}
],
"category": "vendor",
"name": "Blue Coat"
},
{
"branches": [
{
"category": "product_name",
"name": "Cisco ACE",
"product": {
"name": "Cisco ACE",
"product_id": "T003259",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:application_control_engine_software:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Advanced Malware Protection",
"product": {
"name": "Cisco Advanced Malware Protection",
"product_id": "T007044",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:advanced_malware_protection:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Aironet Access Point",
"product": {
"name": "Cisco Aironet Access Point",
"product_id": "T012215",
"product_identification_helper": {
"cpe": "cpe:/o:cisco:aironet_access_point_software:-"
}
}
},
{
"category": "product_name",
"name": "Cisco AnyConnect Secure Mobility Solution",
"product": {
"name": "Cisco AnyConnect Secure Mobility Solution",
"product_id": "T001830",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:anyconnect_secure_mobility_client:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Application Networking Manager",
"product": {
"name": "Cisco Application Networking Manager",
"product_id": "T000614",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:application_networking_manager:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Digital Media Manager",
"product": {
"name": "Cisco Digital Media Manager",
"product_id": "201470",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:digital_media_manager:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Email Security Appliance",
"product": {
"name": "Cisco Email Security Appliance",
"product_id": "196900",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:email_security_appliance:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Emergency Responder",
"product": {
"name": "Cisco Emergency Responder",
"product_id": "2040",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:emergency_responder:-"
}
}
},
{
"category": "product_name",
"name": "Cisco IOS",
"product": {
"name": "Cisco IOS",
"product_id": "T034297",
"product_identification_helper": {
"cpe": "cpe:/o:cisco:ios:-"
}
}
},
{
"category": "product_name",
"name": "Cisco IOS XE",
"product": {
"name": "Cisco IOS XE",
"product_id": "203396",
"product_identification_helper": {
"cpe": "cpe:/o:cisco:ios_xe:-"
}
}
},
{
"category": "product_name",
"name": "Cisco IP Phone",
"product": {
"name": "Cisco IP Phone",
"product_id": "2070",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:ip_phone:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Intrusion Prevention System (IPS)",
"product": {
"name": "Cisco Intrusion Prevention System (IPS)",
"product_id": "2056",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:intrusion_prevention_system:-"
}
}
},
{
"category": "product_name",
"name": "Cisco MDS 9000",
"product": {
"name": "Cisco MDS 9000",
"product_id": "T001069",
"product_identification_helper": {
"cpe": "cpe:/o:cisco:mds_9000:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Network Analysis Module",
"product": {
"name": "Cisco Network Analysis Module",
"product_id": "2084",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:network_analysis_module:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Nexus 2000",
"product": {
"name": "Cisco Nexus 2000",
"product_id": "T003851",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:nexus:3000"
}
}
},
{
"category": "product_name",
"name": "Cisco Nexus 1000V",
"product": {
"name": "Cisco Nexus 1000V",
"product_id": "160893",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:nexus_1000v:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Nexus 5000",
"product": {
"name": "Cisco Nexus 5000",
"product_id": "110496",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:nexus_5000:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Nexus 6000",
"product": {
"name": "Cisco Nexus 6000",
"product_id": "T004721",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:nexus_6000:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Nexus 7000",
"product": {
"name": "Cisco Nexus 7000",
"product_id": "110495",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:nexus_7000:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Nexus 9000",
"product": {
"name": "Cisco Nexus 9000",
"product_id": "T004723",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:nexus_9000:-"
}
}
},
{
"category": "product_name",
"name": "Cisco ONS",
"product": {
"name": "Cisco ONS",
"product_id": "T003263",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:ons:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Packet Tracer",
"product": {
"name": "Cisco Packet Tracer",
"product_id": "T005209",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:packet_tracer:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Prime Collaboration",
"product": {
"name": "Cisco Prime Collaboration",
"product_id": "190829",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:prime_collaboration:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Prime Infrastructure",
"product": {
"name": "Cisco Prime Infrastructure",
"product_id": "T000756",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:prime_infrastructure:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Secure Access Control Server (ACS)",
"product": {
"name": "Cisco Secure Access Control Server (ACS)",
"product_id": "T000613",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:secure_access_control_server:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Security Manager (CSM)",
"product": {
"name": "Cisco Security Manager (CSM)",
"product_id": "95918",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:security_manager:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Show and Share",
"product": {
"name": "Cisco Show and Share",
"product_id": "T003254",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:show_and_share:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Small Business 300 Series Managed Switches",
"product": {
"name": "Cisco Small Business 300 Series Managed Switches",
"product_id": "T014620",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:small_business_300_series_managed_switches:-"
}
}
},
{
"category": "product_name",
"name": "Cisco TelePresence",
"product": {
"name": "Cisco TelePresence",
"product_id": "T001491",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:telepresence:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Communications Domain Manager (CUCDM)",
"product": {
"name": "Cisco Unified Communications Domain Manager (CUCDM)",
"product_id": "189046",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_communications_domain_manager:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Communications Manager (CUCM)",
"product": {
"name": "Cisco Unified Communications Manager (CUCM)",
"product_id": "2142",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_communications_manager:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Contact Center Enterprise",
"product": {
"name": "Cisco Unified Contact Center Enterprise",
"product_id": "2143",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_contact_center_enterprise:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified Contact Center Express (UCCX)",
"product": {
"name": "Cisco Unified Contact Center Express (UCCX)",
"product_id": "T003053",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:unified_contact_center_express:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified IP Phone",
"product": {
"name": "Cisco Unified IP Phone",
"product_id": "T003264",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:unified_ip_phones:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unified MeetingPlace (MP)",
"product": {
"name": "Cisco Unified MeetingPlace (MP)",
"product_id": "2153",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unified_meetingplace:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unity Connection",
"product": {
"name": "Cisco Unity Connection",
"product_id": "T030242",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:unity_connection:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Unity Express",
"product": {
"name": "Cisco Unity Express",
"product_id": "2002",
"product_identification_helper": {
"cpe": "cpe:/h:cisco:unity_express:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Video Surveillance",
"product": {
"name": "Cisco Video Surveillance",
"product_id": "T037183",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:video_surveillance_software:-"
}
}
},
{
"category": "product_name",
"name": "Cisco WebEx Meeting Center",
"product": {
"name": "Cisco WebEx Meeting Center",
"product_id": "T002323",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:webex_meeting_center:-"
}
}
},
{
"category": "product_name",
"name": "Cisco WebEx Meetings Server",
"product": {
"name": "Cisco WebEx Meetings Server",
"product_id": "T001160",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:webex_meetings_server:-"
}
}
},
{
"category": "product_name",
"name": "Cisco WebEx Node for MCS",
"product": {
"name": "Cisco WebEx Node for MCS",
"product_id": "T001162",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:webex_node_for_mcs:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Wide Area Application Services",
"product": {
"name": "Cisco Wide Area Application Services",
"product_id": "2186",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:wide_area_application_services:-"
}
}
},
{
"category": "product_name",
"name": "Cisco Wireless LAN Controllers",
"product": {
"name": "Cisco Wireless LAN Controllers",
"product_id": "1889",
"product_identification_helper": {
"cpe": "cpe:/a:cisco:wireless_lan_controllers:-"
}
}
}
],
"category": "vendor",
"name": "Cisco"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c19.10",
"product": {
"name": "Dell NetWorker \u003c19.10",
"product_id": "T032354"
}
},
{
"category": "product_version",
"name": "19.1",
"product": {
"name": "Dell NetWorker 19.10",
"product_id": "T032354-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.10"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "F5 ARX",
"product": {
"name": "F5 ARX",
"product_id": "T001664",
"product_identification_helper": {
"cpe": "cpe:/a:f5:arx:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Access Policy Manager",
"product": {
"name": "F5 BIG-IP Access Policy Manager",
"product_id": "393597",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_access_policy_manager:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Analytics",
"product": {
"name": "F5 BIG-IP Analytics",
"product_id": "644941",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_analytics:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Application Security Manager",
"product": {
"name": "F5 BIG-IP Application Security Manager",
"product_id": "393599",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_application_security_manager:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Edge Gateway",
"product": {
"name": "F5 BIG-IP Edge Gateway",
"product_id": "644948",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_edge_gateway:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Global Traffic Manager",
"product": {
"name": "F5 BIG-IP Global Traffic Manager",
"product_id": "644952",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_global_traffic_manager:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Link Controller",
"product": {
"name": "F5 BIG-IP Link Controller",
"product_id": "644954",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_link_controller:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Local Traffic Manager",
"product": {
"name": "F5 BIG-IP Local Traffic Manager",
"product_id": "3791",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_local_traffic_manager:-"
}
}
},
{
"category": "product_name",
"name": "F5 BIG-IP Protocol Security Manager",
"product": {
"name": "F5 BIG-IP Protocol Security Manager",
"product_id": "T001697",
"product_identification_helper": {
"cpe": "cpe:/a:f5:protocol_security_manager:-"
}
}
},
{
"category": "product_name",
"name": "F5 Enterprise Manager",
"product": {
"name": "F5 Enterprise Manager",
"product_id": "T000125",
"product_identification_helper": {
"cpe": "cpe:/a:f5:enterprise_manager:-"
}
}
},
{
"category": "product_name",
"name": "F5 WAN Optimization Manager",
"product": {
"name": "F5 WAN Optimization Manager",
"product_id": "T001721",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip_wan_optimization_manager:-"
}
}
},
{
"category": "product_name",
"name": "F5 WebAccelerator",
"product": {
"name": "F5 WebAccelerator",
"product_id": "T001723",
"product_identification_helper": {
"cpe": "cpe:/h:f5:big-ip_webaccelerator:-"
}
}
}
],
"category": "vendor",
"name": "F5"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "9",
"product": {
"name": "FreeBSD Project FreeBSD OS 9",
"product_id": "157037",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:9.0"
}
}
},
{
"category": "product_version",
"name": "9.3",
"product": {
"name": "FreeBSD Project FreeBSD OS 9.3",
"product_id": "T003390",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:9.3"
}
}
},
{
"category": "product_version",
"name": "10-10.3",
"product": {
"name": "FreeBSD Project FreeBSD OS 10-10.3",
"product_id": "T007633",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:10.3"
}
}
},
{
"category": "product_version",
"name": "11-11.0",
"product": {
"name": "FreeBSD Project FreeBSD OS 11-11.0",
"product_id": "T008147",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:11"
}
}
}
],
"category": "product_name",
"name": "FreeBSD OS"
}
],
"category": "vendor",
"name": "FreeBSD Project"
},
{
"branches": [
{
"category": "product_name",
"name": "Juniper JUNOS",
"product": {
"name": "Juniper JUNOS",
"product_id": "5930",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:-"
}
}
},
{
"category": "product_name",
"name": "Juniper Junos Space",
"product": {
"name": "Juniper Junos Space",
"product_id": "T003343",
"product_identification_helper": {
"cpe": "cpe:/a:juniper:junos_space:-"
}
}
},
{
"category": "product_name",
"name": "Juniper ScreenOS",
"product": {
"name": "Juniper ScreenOS",
"product_id": "T008638",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:screenos:-"
}
}
}
],
"category": "vendor",
"name": "Juniper"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source OpenSSL",
"product": {
"name": "Open Source OpenSSL",
"product_id": "8269",
"product_identification_helper": {
"cpe": "cpe:/a:openssl:openssl:-"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server",
"product": {
"name": "SUSE Linux Enterprise Server",
"product_id": "681084",
"product_identification_helper": {
"cpe": "cpe:/o:suse:linux_enterprise_server:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "12.04 LTS",
"product": {
"name": "Ubuntu Linux 12.04 LTS",
"product_id": "170497",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:12.04:-:lts"
}
}
},
{
"category": "product_version",
"name": "14.04 LTS",
"product": {
"name": "Ubuntu Linux 14.04 LTS",
"product_id": "T003005",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:14.04:-:lts"
}
}
},
{
"category": "product_version",
"name": "16.04 LTS",
"product": {
"name": "Ubuntu Linux 16.04 LTS",
"product_id": "T007521",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:16.04_lts"
}
}
}
],
"category": "product_name",
"name": "Linux"
}
],
"category": "vendor",
"name": "Ubuntu"
},
{
"branches": [
{
"category": "product_name",
"name": "Xerox FreeFlow Print Server",
"product": {
"name": "Xerox FreeFlow Print Server",
"product_id": "T016743",
"product_identification_helper": {
"cpe": "cpe:/a:xerox:freeflow_print_server:-"
}
}
},
{
"category": "product_name",
"name": "Xerox Phaser",
"product": {
"name": "Xerox Phaser",
"product_id": "T004484",
"product_identification_helper": {
"cpe": "cpe:/h:xerox:phaser:-"
}
}
}
],
"category": "vendor",
"name": "Xerox"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2177",
"notes": [
{
"category": "description",
"text": "Es existiert eine Integer\u00fcberlauf Schwachstelle in OpenSSL. Diese Schwachstelle beruht auf mehren undefinierten \"pointer arithmetic\" in den Funktionen [ssl/s3_srvr.c, ssl/ssl_sess.c und ssl/t1_lib.c]. Ein entfernter anonymer Angreifer kann diese Schwachstelle mit bisher unbekannten Auswirkungen ausnutzen."
}
],
"product_status": {
"known_affected": [
"2070",
"T003263",
"T001160",
"T003264",
"157037",
"T003343",
"T008638",
"T012215",
"2153",
"T006618",
"T005209",
"T006617",
"T004914",
"T030242",
"T000756",
"T001723",
"T001721",
"5930",
"644941",
"644948",
"T001162",
"190829",
"T003254",
"T008147",
"393597",
"T003851",
"110495",
"8269",
"110496",
"T003259",
"T034297",
"393599",
"T014620",
"2040",
"2084",
"T032354",
"203396",
"T001830",
"95918",
"644954",
"T002323",
"T003290",
"644952",
"T003053",
"T007521",
"67646",
"T003005",
"2056",
"681084",
"189046",
"T000614",
"T000613",
"2002",
"T001664",
"T001069",
"T007044",
"T001491",
"T004484",
"T007633",
"3791",
"T004721",
"T004723",
"2143",
"2142",
"2186",
"160893",
"T016743",
"T037183",
"196900",
"170497",
"T000125",
"201470",
"T001697",
"T003390",
"1889"
]
},
"release_date": "2016-06-09T22:00:00.000+00:00",
"title": "CVE-2016-2177"
}
]
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.