Information disclosure in OpenSSL - CVE-2016-0800

Vulnerability identifier: #VU1914

CSH Severity: Medium

CVSS v4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-0800

CWE-ID: CWE-327

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to decrypt sensitive information.

The vulnerability exists due to usage of weak SSLv2 protocol, which requires to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data. A remote attacker can decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle.

The vulnerability is dubbed "DROWN" attack.

OpenSSL
NonStop Application Server for Java (NSASJ)
ProtecTIER Gateway for System Z (PID 5639-FPA)
ProtecTIER Entry Edition (PID 5639-PTC) - TS7610 / TS7620
ProtecTIER Appliance Edition (PID 5639-PTB) - TS7650AP1
ProtecTIER Enterprise Edition (PID 5639-PTA) - TS7650G
IBM Observability with Instana
NonStop Virtual TapeServer (VTS)
Storage Defender - Resiliency Service
N series Snap Creator Framework
SnapDrive for Unix
SnapDrive for Windows
IBM Integrated Management Module
HP System Management Homepage
Fedora
Slackware Linux
Data ONTAP operating in 7-Mode
openssl
openssl-solibs
openssl101e
openSUSE Leap
Integrated Data protection Appliance (IDPA)
Data Protection Search

Update to version 1.0.1s or 1.0.2g.

Storage Defender - Resiliency Service - update to 2.0.14
N series Snap Creator Framework - update to 4.3.1
SnapDrive for Unix - update to 5.3.1
SnapDrive for Windows - update to 7.1.4
IBM Integrated Management Module - update to YUOOH2B-1.5.1
openssl - addressed in versions 0.9.8zh, 1.0.1s
openssl-solibs - addressed in versions 0.9.8zh, 1.0.1s
openssl101e - update to 1.0.1e-8.el5
openssl - addressed in versions 1.0.1k-14.fc22, 1.0.2g-1.fc23, 1.0.2g-2.fc23
IBM Observability with Instana - update to 1.0.295
Integrated Data protection Appliance (IDPA) - update to 2.7.8 with DP Search 19.6.6
HP System Management Homepage - update to 7.5.4
Data Protection Search - update to 19.6.6
openSUSE Leap - update to 42.1

• Exploit #8589 - SSL/TLS Version Detection (November 8, 2022)

• https://drownattack.com/drown-attack-paper.pdf
• http://openssl.org/news/secadv/20160301.txt

• Information disclosure in OpenSSL
• openSUSE update for openssl
• Information disclosure in HPE System Management Homepage (SMH)
• Multiple vulnerabilities in HPE NonStop Virtual TapeServer (VTS)
• Information disclosure in HPE NonStop Application Server for Java (NSASJ)
• Information disclosure in Multiple N series Products
• Multiple vulnerabilities in IBM ProtecTIER
• Multiple vulnerabilities in IBM Integrated Management Module (IMM)
• Slackware Linux update for openssl
• Fedora 23 update for openssl
• Fedora 23 update for openssl
• Fedora 22 update for openssl
• Fedora EPEL 5 update for openssl101e
• Multiple vulnerabilities in Dell Data Protection Search
• Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
• Multiple vulnerabilities in IBM Storage Defender - Resiliency Service