CVE-2016-0800

Summary

CVE	CVE-2016-0800
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2016-03-01 20:59:00 UTC
Updated	2022-12-13 12:15:00 UTC
Description	The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.

Risk And Classification

Problem Types: CWE-310 | CWE-200

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Openssl	Openssl	1.0.1	All	All	All
Application	Openssl	Openssl	1.0.1	beta1	All	All
Application	Openssl	Openssl	1.0.1	beta2	All	All
Application	Openssl	Openssl	1.0.1	beta3	All	All
Application	Openssl	Openssl	1.0.1a	All	All	All
Application	Openssl	Openssl	1.0.1b	All	All	All
Application	Openssl	Openssl	1.0.1c	All	All	All
Application	Openssl	Openssl	1.0.1d	All	All	All
Application	Openssl	Openssl	1.0.1e	All	All	All
Application	Openssl	Openssl	1.0.1f	All	All	All
Application	Openssl	Openssl	1.0.1g	All	All	All
Application	Openssl	Openssl	1.0.1h	All	All	All
Application	Openssl	Openssl	1.0.1i	All	All	All
Application	Openssl	Openssl	1.0.1j	All	All	All
Application	Openssl	Openssl	1.0.1k	All	All	All
Application	Openssl	Openssl	1.0.1l	All	All	All
Application	Openssl	Openssl	1.0.1m	All	All	All
Application	Openssl	Openssl	1.0.1n	All	All	All
Application	Openssl	Openssl	1.0.1o	All	All	All
Application	Openssl	Openssl	1.0.1p	All	All	All
Application	Openssl	Openssl	1.0.1q	All	All	All
Application	Openssl	Openssl	1.0.1r	All	All	All
Application	Openssl	Openssl	1.0.2	All	All	All
Application	Openssl	Openssl	1.0.2	beta1	All	All
Application	Openssl	Openssl	1.0.2	beta2	All	All
Application	Openssl	Openssl	1.0.2	beta3	All	All
Application	Openssl	Openssl	1.0.2a	All	All	All
Application	Openssl	Openssl	1.0.2b	All	All	All
Application	Openssl	Openssl	1.0.2c	All	All	All
Application	Openssl	Openssl	1.0.2d	All	All	All
Application	Openssl	Openssl	1.0.2e	All	All	All
Application	Openssl	Openssl	1.0.2f	All	All	All
Application	Openssl	Openssl	1.0.1	All	All	All
Application	Openssl	Openssl	1.0.1	beta1	All	All
Application	Openssl	Openssl	1.0.1	beta2	All	All
Application	Openssl	Openssl	1.0.1	beta3	All	All
Application	Openssl	Openssl	1.0.1a	All	All	All
Application	Openssl	Openssl	1.0.1b	All	All	All
Application	Openssl	Openssl	1.0.1c	All	All	All
Application	Openssl	Openssl	1.0.1d	All	All	All
Application	Openssl	Openssl	1.0.1e	All	All	All
Application	Openssl	Openssl	1.0.1f	All	All	All
Application	Openssl	Openssl	1.0.1g	All	All	All
Application	Openssl	Openssl	1.0.1h	All	All	All
Application	Openssl	Openssl	1.0.1i	All	All	All
Application	Openssl	Openssl	1.0.1j	All	All	All
Application	Openssl	Openssl	1.0.1k	All	All	All
Application	Openssl	Openssl	1.0.1l	All	All	All
Application	Openssl	Openssl	1.0.1m	All	All	All
Application	Openssl	Openssl	1.0.1n	All	All	All
Application	Openssl	Openssl	1.0.1o	All	All	All
Application	Openssl	Openssl	1.0.1p	All	All	All
Application	Openssl	Openssl	1.0.1q	All	All	All
Application	Openssl	Openssl	1.0.1r	All	All	All
Application	Openssl	Openssl	1.0.2	All	All	All
Application	Openssl	Openssl	1.0.2	beta1	All	All
Application	Openssl	Openssl	1.0.2	beta2	All	All
Application	Openssl	Openssl	1.0.2	beta3	All	All
Application	Openssl	Openssl	1.0.2a	All	All	All
Application	Openssl	Openssl	1.0.2b	All	All	All
Application	Openssl	Openssl	1.0.2c	All	All	All
Application	Openssl	Openssl	1.0.2d	All	All	All
Application	Openssl	Openssl	1.0.2e	All	All	All
Application	Openssl	Openssl	1.0.2f	All	All	All
Application	Pulsesecure	Client	-	All	All	All
Application	Pulsesecure	Client	-	All	All	All
Application	Pulsesecure	Steel Belted Radius	-	All	All	All
Application	Pulsesecure	Steel Belted Radius	-	All	All	All

References

Reference	Source	Link	Tags
Oracle Solaris Bulletin - April 2016	CONFIRM	www.oracle.com
Oracle Critical Patch Update Advisory - April 2016	CONFIRM	www.oracle.com
Knowledge Center	CONFIRM	kc.mcafee.com
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
[security-announce] openSUSE-SU-2016:0637-1: important: Security update	SUSE	lists.opensuse.org
cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf	CONFIRM	cert-portal.siemens.com
[security-announce] SUSE-SU-2016:0617-1: important: Security update for	SUSE	lists.opensuse.org
Oracle Critical Patch Update - July 2016	CONFIRM	www.oracle.com
Siemens Industrial Products DROWN Vulnerability \| ICS-CERT	MISC	ics-cert.us-cert.gov
[security-announce] openSUSE-SU-2016:0720-1: important: Security update	SUSE	lists.opensuse.org
HPE Support document - HPE Support Center	CONFIRM	h20566.www2.hpe.com
HPE Support document - HPE Support Center	CONFIRM	h20566.www2.hpe.com
[security-announce] openSUSE-SU-2016:0627-1: important: Security update	SUSE	lists.opensuse.org
[security-announce] SUSE-SU-2016:0624-1: important: Security update for	SUSE	lists.opensuse.org
[security-announce] SUSE-SU-2016:0620-1: important: Security update for	SUSE	lists.opensuse.org
Oracle July 2016 Critical Patch Update Multiple Vulnerabilities	BID	www.securityfocus.com
Cross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800) - Juniper Networks	CONFIRM	kb.juniper.net
OpenSSL Flaws Let Remote Users Deny Service and Decrypt TLS Sessions in Certain Cases - SecurityTracker	SECTRACK	www.securitytracker.com
CVE-2016-0800 SSLv2 Vulnerability in Multiple NetApp Products \| NetApp Product Security	CONFIRM	security.netapp.com
OpenSSL: Multiple vulnerabilities (GLSA 201603-15) — Gentoo Security	GENTOO	security.gentoo.org
HPE Support document - HPE Support Center	CONFIRM	h20566.www2.hpe.com
www.openssl.org/news/secadv/20160301.txt	CONFIRM	www.openssl.org
DROWN Attack	MISC	drownattack.com
Oracle Critical Patch Update - January 2018	CONFIRM	www.oracle.com
[security-announce] SUSE-SU-2016:1057-1: important: Security update for	SUSE	lists.opensuse.org
'[security bulletin] HPSBMU03573 rev.1 - HPE System Management Homepage (SMH), Remote Disclosure of I' - MARC	HP	marc.info
Siemens	CONFIRM	www.siemens.com
Citrix XenServer Security Update for CVE-2016-0800	CONFIRM	support.citrix.com
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016	CISCO	tools.cisco.com
Arista - Security Advisory 0018	MISC	www.arista.com
OpenSSL DROWN Attack CVE-2016-0800 Security Bypass Vulnerability	BID	www.securityfocus.com
DROWN - Cross-protocol attack on TLS using SSLv2 (CVE-2016-0800) - Red Hat Customer Portal	CONFIRM	access.redhat.com
[security-announce] openSUSE-SU-2016:0638-1: important: Security update	SUSE	lists.opensuse.org
[security-announce] SUSE-SU-2016:0678-1: important: Security update for	SUSE	lists.opensuse.org
'[security bulletin] HPSBMU03575 rev.1 - HP Smart Update Manager (SUM), Remote Denial of Service (DoS' - MARC	HP	marc.info
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
[security-announce] openSUSE-SU-2016:0628-1: important: Security update	SUSE	lists.opensuse.org
[security-announce] SUSE-SU-2016:0631-1: important: Security update for	SUSE	lists.opensuse.org
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
[security-announce] openSUSE-SU-2016:1241-1: important: Security update	SUSE	lists.opensuse.org
Oracle VM Server for x86 Bulletin - July 2016	CONFIRM	www.oracle.com
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
HPE Support document - HPE Support Center	CONFIRM	h20566.www2.hpe.com
[security-announce] SUSE-SU-2016:0641-1: important: Security update for	SUSE	lists.opensuse.org
Security Advisory - OpenSSL DROWN Security Vulnerability	CONFIRM	www.huawei.com
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
StruxureWare Data Center Operation Software Vulnerability Fixes - User Assistance for StruxureWare Data Center Operation 8 - Help Center: Support for EcoStruxure IT, StruxureWare for Data Centers, and NetBotz	CONFIRM	help.ecostruxureit.com
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	CONFIRM	cert-portal.siemens.com
Oracle Linux Bulletin - January 2016	CONFIRM	www.oracle.com
FreeBSD-SA-16:12	FREEBSD	security.FreeBSD.org
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
[security-announce] SUSE-SU-2016:0621-1: important: Security update for	SUSE	lists.opensuse.org
Juniper Networks - 2016-10 Security Bulletin: OpenSSL security updates	CONFIRM	kb.juniper.net
Public KB - SA40168 - [Pulse Secure] March 1st 2016 OpenSSL Security Advisory	CONFIRM	kb.pulsesecure.net
[security-announce] openSUSE-SU-2016:0640-1: important: Security update	SUSE	lists.opensuse.org
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
Vulnerability Note VU#583776 - Network traffic encrypted using RSA-based SSL certificates over SSLv2 may be decrypted by the DROWN attack	CERT-VN	www.kb.cert.org
Document Display \| HPE Support Center	CONFIRM	h20566.www2.hpe.com
[security-announce] openSUSE-SU-2016:1239-1: important: Security update	SUSE	lists.opensuse.org
Red Hat Customer Portal	REDHAT	rhn.redhat.com
'[security bulletin] HPSBGN03569 rev.1 - HPE OneView for VMware vCenter (OV4VC), Remote Disclosure of' - MARC	HP	marc.info
Oracle Solaris Bulletin - January 2016	CONFIRM	www.oracle.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

378509 Splunk Enterprise Multiple Vulnerabilities (SP-CAAAPKV)
591280 Siemens SCALANCE X-200RNA Switch Devices Denial of Service (DoS) Multiple Vulnerabilities (ICSA-22-349-21, SSA-412672)
591286 Siemens SCALANCE DROWN (Decrypting Rivest Shamir Adleman (RSA) with Obsolete and Weakened eNcryption) Vulnerability (ICSA-16-103-03C, SSA-623229)
591311 Bosch Rexroth PRA-ES8P2S Ethernet-Switch Multiple Vulnerabilities (BOSCH-SA-247053-BT)