ID
VAR-201606-0478
CVE
CVE-2016-2177
TITLE
OpenSSL Denial of service vulnerability
Trust: 0.6
DESCRIPTION
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c. OpenSSL is prone to an integer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. OpenSSL 1.0.2h and prior versions are vulnerable. Summary: An update is now available for JBoss Core Services on RHEL 7. (CVE-2016-2178) * A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201612-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: OpenSSL: Multiple vulnerabilities Date: December 07, 2016 Bugs: #581234, #585142, #585276, #591454, #592068, #592074, #592082, #594500, #595186 ID: 201612-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in OpenSSL, the worst of which allows attackers to conduct a time based side-channel attack. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-libs/openssl < 1.0.2j >= 1.0.2j Description =========== Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers and the International Association for Cryptologic Research's (IACR) paper, "Make Sure DSA Signing Exponentiations Really are Constant-Time" for further details. Workaround ========== There is no known workaround at this time. Resolution ========== All OpenSSL users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/openssl-1.0.2j" References ========== [ 1 ] CVE-2016-2105 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2105 [ 2 ] CVE-2016-2106 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2106 [ 3 ] CVE-2016-2107 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2107 [ 4 ] CVE-2016-2108 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2108 [ 5 ] CVE-2016-2109 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2109 [ 6 ] CVE-2016-2176 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2176 [ 7 ] CVE-2016-2177 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2177 [ 8 ] CVE-2016-2178 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2178 [ 9 ] CVE-2016-2180 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2180 [ 10 ] CVE-2016-2183 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2183 [ 11 ] CVE-2016-6304 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6304 [ 12 ] CVE-2016-6305 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6305 [ 13 ] CVE-2016-6306 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6306 [ 14 ] CVE-2016-7052 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7052 [ 15 ] Make Sure DSA Signing Exponentiations Really are Constant-Time http://eprint.iacr.org/2016/594.pdf Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201612-16 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2016 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5 . ========================================================================== Ubuntu Security Notice USN-3087-2 September 23, 2016 openssl regression ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: USN-3087-1 introduced a regression in OpenSSL. Software Description: - openssl: Secure Socket Layer (SSL) cryptographic library and tools Details: USN-3087-1 fixed vulnerabilities in OpenSSL. The fix for CVE-2016-2182 was incomplete and caused a regression when parsing certificates. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Shi Lei discovered that OpenSSL incorrectly handled the OCSP Status Request extension. This issue has only been addressed in Ubuntu 16.04 LTS in this update. (CVE-2016-2178) Quan Luo discovered that OpenSSL did not properly restrict the lifetime of queue entries in the DTLS implementation. (CVE-2016-2179) Shi Lei discovered that OpenSSL incorrectly handled memory in the TS_OBJ_print_bio() function. (CVE-2016-2180) It was discovered that the OpenSSL incorrectly handled the DTLS anti-replay feature. (CVE-2016-2181) Shi Lei discovered that OpenSSL incorrectly validated division results. (CVE-2016-2182) Karthik Bhargavan and Gaetan Leurent discovered that the DES and Triple DES ciphers were vulnerable to birthday attacks. This update moves DES from the HIGH cipher list to MEDIUM. (CVE-2016-2183) Shi Lei discovered that OpenSSL incorrectly handled certain ticket lengths. (CVE-2016-6302) Shi Lei discovered that OpenSSL incorrectly handled memory in the MDC2_Update() function. (CVE-2016-6303) Shi Lei discovered that OpenSSL incorrectly performed certain message length checks. (CVE-2016-6306) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: libssl1.0.0 1.0.2g-1ubuntu4.5 Ubuntu 14.04 LTS: libssl1.0.0 1.0.1f-1ubuntu2.21 Ubuntu 12.04 LTS: libssl1.0.0 1.0.1-4ubuntu5.38 After a standard system update you need to reboot your computer to make all the necessary changes. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6 Advisory ID: RHSA-2017:0193-01 Product: Red Hat JBoss Core Services Advisory URL: https://access.redhat.com/errata/RHSA-2017:0193 Issue date: 2017-01-25 CVE Names: CVE-2016-2108 CVE-2016-2177 CVE-2016-2178 CVE-2016-4459 CVE-2016-6808 CVE-2016-8612 ===================================================================== 1. Summary: Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.23 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat JBoss Core Services on RHEL 6 Server - i386, noarch, ppc64, x86_64 3. Description: This release adds the new Apache HTTP Server 2.4.23 packages that are part of the JBoss Core Services offering. This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.6, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release. Security Fix(es): * A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. (CVE-2016-2108) * It was found that the length checks prior to writing to the target buffer for creating a virtual host mapping rule did not take account of the length of the virtual host name, creating the potential for a buffer overflow. (CVE-2016-6808) * It was discovered that OpenSSL did not always use constant time operations when computing Digital Signature Algorithm (DSA) signatures. A local attacker could possibly use this flaw to obtain a private DSA key belonging to another user or service running on the same system. (CVE-2016-2178) * Multiple integer overflow flaws were found in the way OpenSSL performed pointer arithmetic. A remote attacker could possibly use these flaws to cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2016-2177) * It was discovered that specifying configuration with a JVMRoute path longer than 80 characters will cause segmentation fault leading to a server crash. (CVE-2016-4459) * An error was found in protocol parsing logic of mod_cluster load balancer Apache HTTP Server modules. An attacker could use this flaw to cause a Segmentation Fault in the serving httpd process. (CVE-2016-8612) Red Hat would like to thank the OpenSSL project for reporting CVE-2016-2108. The CVE-2016-4459 issue was discovered by Robert Bost (Red Hat). Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1331402 - CVE-2016-2108 openssl: Memory corruption in the ASN.1 encoder 1341583 - CVE-2016-4459 mod_cluster: Buffer overflow in mod_manager when sending request with long JVMRoute 1341705 - CVE-2016-2177 openssl: Possible integer overflow vulnerabilities in codebase 1343400 - CVE-2016-2178 openssl: Non-constant time codepath followed for certain operations in DSA implementation 1382352 - CVE-2016-6808 mod_jk: Buffer overflow when concatenating virtual host name and URI 1387605 - CVE-2016-8612 JBCS mod_cluster: Protocol parsing logic error 6. Package List: Red Hat JBoss Core Services on RHEL 6 Server: Source: jbcs-httpd24-httpd-2.4.23-102.jbcs.el6.src.rpm jbcs-httpd24-mod_auth_kerb-5.4-35.jbcs.el6.src.rpm jbcs-httpd24-mod_bmx-0.9.6-14.GA.jbcs.el6.src.rpm jbcs-httpd24-mod_cluster-native-1.3.5-13.Final_redhat_1.jbcs.el6.src.rpm jbcs-httpd24-mod_jk-1.2.41-14.redhat_1.jbcs.el6.src.rpm jbcs-httpd24-mod_rt-2.4.1-16.GA.jbcs.el6.src.rpm jbcs-httpd24-mod_security-2.9.1-18.GA.jbcs.el6.src.rpm jbcs-httpd24-nghttp2-1.12.0-9.jbcs.el6.src.rpm jbcs-httpd24-openssl-1.0.2h-12.jbcs.el6.src.rpm i386: jbcs-httpd24-httpd-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-httpd-debuginfo-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-httpd-devel-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-httpd-selinux-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-httpd-src-zip-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-httpd-tools-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-httpd-zip-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-mod_auth_kerb-5.4-35.jbcs.el6.i686.rpm jbcs-httpd24-mod_auth_kerb-debuginfo-5.4-35.jbcs.el6.i686.rpm jbcs-httpd24-mod_bmx-0.9.6-14.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_bmx-debuginfo-0.9.6-14.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_bmx-src-zip-0.9.6-14.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_cluster-native-1.3.5-13.Final_redhat_1.jbcs.el6.i686.rpm jbcs-httpd24-mod_cluster-native-debuginfo-1.3.5-13.Final_redhat_1.jbcs.el6.i686.rpm jbcs-httpd24-mod_cluster-native-src-zip-1.3.5-13.Final_redhat_1.jbcs.el6.i686.rpm jbcs-httpd24-mod_jk-ap24-1.2.41-14.redhat_1.jbcs.el6.i686.rpm jbcs-httpd24-mod_jk-debuginfo-1.2.41-14.redhat_1.jbcs.el6.i686.rpm jbcs-httpd24-mod_jk-manual-1.2.41-14.redhat_1.jbcs.el6.i686.rpm jbcs-httpd24-mod_jk-src-zip-1.2.41-14.redhat_1.jbcs.el6.i686.rpm jbcs-httpd24-mod_ldap-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-mod_proxy_html-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-mod_rt-2.4.1-16.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_rt-debuginfo-2.4.1-16.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_rt-src-zip-2.4.1-16.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_security-2.9.1-18.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_security-debuginfo-2.9.1-18.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_security-src-zip-2.9.1-18.GA.jbcs.el6.i686.rpm jbcs-httpd24-mod_session-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-mod_ssl-2.4.23-102.jbcs.el6.i686.rpm jbcs-httpd24-nghttp2-1.12.0-9.jbcs.el6.i686.rpm jbcs-httpd24-nghttp2-debuginfo-1.12.0-9.jbcs.el6.i686.rpm jbcs-httpd24-openssl-1.0.2h-12.jbcs.el6.i686.rpm jbcs-httpd24-openssl-debuginfo-1.0.2h-12.jbcs.el6.i686.rpm jbcs-httpd24-openssl-devel-1.0.2h-12.jbcs.el6.i686.rpm jbcs-httpd24-openssl-libs-1.0.2h-12.jbcs.el6.i686.rpm jbcs-httpd24-openssl-perl-1.0.2h-12.jbcs.el6.i686.rpm jbcs-httpd24-openssl-static-1.0.2h-12.jbcs.el6.i686.rpm noarch: jbcs-httpd24-httpd-manual-2.4.23-102.jbcs.el6.noarch.rpm ppc64: jbcs-httpd24-httpd-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-httpd-debuginfo-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-httpd-devel-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-httpd-selinux-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-httpd-src-zip-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-httpd-tools-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-httpd-zip-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_auth_kerb-5.4-35.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_auth_kerb-debuginfo-5.4-35.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_bmx-0.9.6-14.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_bmx-debuginfo-0.9.6-14.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_bmx-src-zip-0.9.6-14.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_cluster-native-1.3.5-13.Final_redhat_1.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_cluster-native-debuginfo-1.3.5-13.Final_redhat_1.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_cluster-native-src-zip-1.3.5-13.Final_redhat_1.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_jk-ap24-1.2.41-14.redhat_1.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_jk-debuginfo-1.2.41-14.redhat_1.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_jk-manual-1.2.41-14.redhat_1.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_jk-src-zip-1.2.41-14.redhat_1.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_ldap-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_proxy_html-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_rt-2.4.1-16.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_rt-debuginfo-2.4.1-16.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_rt-src-zip-2.4.1-16.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_security-2.9.1-18.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_security-debuginfo-2.9.1-18.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_security-src-zip-2.9.1-18.GA.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_session-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-mod_ssl-2.4.23-102.jbcs.el6.ppc64.rpm jbcs-httpd24-nghttp2-1.12.0-9.jbcs.el6.ppc64.rpm jbcs-httpd24-nghttp2-debuginfo-1.12.0-9.jbcs.el6.ppc64.rpm jbcs-httpd24-openssl-1.0.2h-12.jbcs.el6.ppc64.rpm jbcs-httpd24-openssl-debuginfo-1.0.2h-12.jbcs.el6.ppc64.rpm jbcs-httpd24-openssl-devel-1.0.2h-12.jbcs.el6.ppc64.rpm jbcs-httpd24-openssl-libs-1.0.2h-12.jbcs.el6.ppc64.rpm jbcs-httpd24-openssl-perl-1.0.2h-12.jbcs.el6.ppc64.rpm jbcs-httpd24-openssl-static-1.0.2h-12.jbcs.el6.ppc64.rpm x86_64: jbcs-httpd24-httpd-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-httpd-debuginfo-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-httpd-devel-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-httpd-selinux-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-httpd-src-zip-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-httpd-tools-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-httpd-zip-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_auth_kerb-5.4-35.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_auth_kerb-debuginfo-5.4-35.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_bmx-0.9.6-14.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_bmx-debuginfo-0.9.6-14.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_bmx-src-zip-0.9.6-14.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_cluster-native-1.3.5-13.Final_redhat_1.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_cluster-native-debuginfo-1.3.5-13.Final_redhat_1.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_cluster-native-src-zip-1.3.5-13.Final_redhat_1.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_jk-ap24-1.2.41-14.redhat_1.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_jk-debuginfo-1.2.41-14.redhat_1.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_jk-manual-1.2.41-14.redhat_1.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_jk-src-zip-1.2.41-14.redhat_1.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_ldap-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_proxy_html-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_rt-2.4.1-16.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_rt-debuginfo-2.4.1-16.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_rt-src-zip-2.4.1-16.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_security-2.9.1-18.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_security-debuginfo-2.9.1-18.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_security-src-zip-2.9.1-18.GA.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_session-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-mod_ssl-2.4.23-102.jbcs.el6.x86_64.rpm jbcs-httpd24-nghttp2-1.12.0-9.jbcs.el6.x86_64.rpm jbcs-httpd24-nghttp2-debuginfo-1.12.0-9.jbcs.el6.x86_64.rpm jbcs-httpd24-openssl-1.0.2h-12.jbcs.el6.x86_64.rpm jbcs-httpd24-openssl-debuginfo-1.0.2h-12.jbcs.el6.x86_64.rpm jbcs-httpd24-openssl-devel-1.0.2h-12.jbcs.el6.x86_64.rpm jbcs-httpd24-openssl-libs-1.0.2h-12.jbcs.el6.x86_64.rpm jbcs-httpd24-openssl-perl-1.0.2h-12.jbcs.el6.x86_64.rpm jbcs-httpd24-openssl-static-1.0.2h-12.jbcs.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2016-2108 https://access.redhat.com/security/cve/CVE-2016-2177 https://access.redhat.com/security/cve/CVE-2016-2178 https://access.redhat.com/security/cve/CVE-2016-4459 https://access.redhat.com/security/cve/CVE-2016-6808 https://access.redhat.com/security/cve/CVE-2016-8612 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFYiQV2XlSAg2UNWIIRAvgEAKC7i1IqPLixCun/+0TTeWRG8B8tJACeJCGP hO9ByjBnLBWhAqUDpI31vKo= =j7tA -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . (CVE-2016-6808) * A memory leak flaw was fixed in expat. See the corresponding CVE pages linked to in the References section for more information about each of the flaws listed in this advisory. Solution: The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). JIRA issues fixed (https://issues.jboss.org/): JBCS-50 - CVE-2012-1148 CVE-2012-0876 expat: various flaws [jbews-3.0.0] JBCS-95 - CVE-2014-3523 httpd: WinNT MPM denial of service 6. (CVE-2016-2177) It was discovered that OpenSSL did not properly handle Montgomery multiplication, resulting in incorrect results leading to transient failures
Trust: 1.98
AFFECTED PRODUCTS
| vendor: | oracle | model: | solaris | scope: | eq | version: | 10 | Trust: 1.9 |
| vendor: | oracle | model: | solaris | scope: | eq | version: | 11.3 | Trust: 1.9 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1r | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1d | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1a | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1b | Trust: 1.0 |
| vendor: | hp | model: | icewall sso agent option | scope: | eq | version: | 10.0 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1f | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1i | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1n | Trust: 1.0 |
| vendor: | oracle | model: | linux | scope: | eq | version: | 5 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1k | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1o | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2e | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1g | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1m | Trust: 1.0 |
| vendor: | hp | model: | icewall mcrp | scope: | eq | version: | 3.0 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2h | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1c | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1l | Trust: 1.0 |
| vendor: | oracle | model: | linux | scope: | eq | version: | 7 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1p | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2g | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1h | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1e | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1s | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2b | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2f | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1j | Trust: 1.0 |
| vendor: | oracle | model: | linux | scope: | eq | version: | 6 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2d | Trust: 1.0 |
| vendor: | hp | model: | icewall sso | scope: | eq | version: | 10.0 | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1t | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2a | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.1q | Trust: 1.0 |
| vendor: | openssl | model: | openssl | scope: | eq | version: | 1.0.2c | Trust: 1.0 |
| vendor: | cisco | model: | stealthwatch udp director | scope: | eq | version: | 0 | Trust: 0.6 |
| vendor: | cisco | model: | content security management appliance | scope: | eq | version: | 0 | Trust: 0.6 |
| vendor: | cisco | model: | cloud web security | scope: | eq | version: | 0 | Trust: 0.6 |
| vendor: | cisco | model: | paging server | scope: | eq | version: | 0 | Trust: 0.6 |
| vendor: | cisco | model: | email security appliance | scope: | eq | version: | 0 | Trust: 0.6 |
| vendor: | oracle | model: | linux | scope: | eq | version: | 6.0 | Trust: 0.6 |
| vendor: | oracle | model: | linux | scope: | eq | version: | 7.0 | Trust: 0.6 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.10 | Trust: 0.3 |
| vendor: | cisco | model: | webex centers t32 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series ip cameras | scope: | eq | version: | 30000 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix ifix | scope: | ne | version: | 1.5.0.13150-13 | Trust: 0.3 |
| vendor: | cisco | model: | clean access manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified contact center enterprise live data server | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series blade switches 4.1 e1 | scope: | ne | version: | 4000 | Trust: 0.3 |
| vendor: | ibm | model: | api management | scope: | eq | version: | 4.0 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix | scope: | eq | version: | 1.5.0.9 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence content server | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | proactive network operations center | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | commerce guided search | scope: | eq | version: | 6.5 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip phone | scope: | eq | version: | 69010 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for linux | scope: | ne | version: | 4.0.7 | Trust: 0.3 |
| vendor: | cisco | model: | ucs central software | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance media server | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix | scope: | eq | version: | 1.5.0.13 | Trust: 0.3 |
| vendor: | cisco | model: | stealthwatch management console | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1e | scope: | - | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment 5.1.fix pack | scope: | eq | version: | 3 | Trust: 0.3 |
| vendor: | cisco | model: | ios and cisco ios xe software | scope: | ne | version: | 16.2 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for android | scope: | ne | version: | 4.0.7 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.5 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2g | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | jabber software development kit | scope: | ne | version: | 11.8 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1a | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | computer telephony integration object server | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified workforce optimization | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | industrial router 1.2.1rb4 | scope: | ne | version: | 910 | Trust: 0.3 |
| vendor: | cisco | model: | nexus intercloud for vmware | scope: | eq | version: | 1000v0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6 | Trust: 0.3 |
| vendor: | ibm | model: | powerkvm | scope: | eq | version: | 3.1 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.14 | Trust: 0.3 |
| vendor: | cisco | model: | ip interoperability and collaboration system | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | asr series | scope: | eq | version: | 50000 | Trust: 0.3 |
| vendor: | cisco | model: | edge digital media player | scope: | eq | version: | 3400 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches standalone nx-os mode | scope: | eq | version: | 9000-0 | Trust: 0.3 |
| vendor: | cisco | model: | unified contact center enterprise | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | ne | version: | 5.3.3.1 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches standalone nx-os mode 7.0 i5 | scope: | ne | version: | 9000- | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.11 | Trust: 0.3 |
| vendor: | cisco | model: | intelligent automation for cloud | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | epolicy orchestrator | scope: | eq | version: | 5.1.2 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches 5.2.8 | scope: | ne | version: | 7000 | Trust: 0.3 |
| vendor: | ibm | model: | api connect | scope: | eq | version: | 5.0.0.0 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for desktop platforms | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.26 | Trust: 0.3 |
| vendor: | ibm | model: | cognos business intelligence server | scope: | eq | version: | 10.1.1 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry appliance fi | scope: | eq | version: | 2.2.0.4 | Trust: 0.3 |
| vendor: | cisco | model: | jabber guest | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | prime license manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance ptz ip cameras | scope: | ne | version: | 2.9 | Trust: 0.3 |
| vendor: | cisco | model: | series digital media players 5.3.6 rb3 | scope: | ne | version: | 4300 | Trust: 0.3 |
| vendor: | cisco | model: | stealthwatch flowcollector sflow | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | web security appliance | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | visual quality experience server | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.11 | Trust: 0.3 |
| vendor: | oracle | model: | commerce guided search | scope: | eq | version: | 6.2.2 | Trust: 0.3 |
| vendor: | oracle | model: | jd edwards enterpriseone tools | scope: | eq | version: | 9.2.1.1 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series ip cameras | scope: | ne | version: | 60002.9 | Trust: 0.3 |
| vendor: | cisco | model: | prime collaboration provisioning | scope: | ne | version: | 11.6 | Trust: 0.3 |
| vendor: | cisco | model: | agent for openflow | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | commerce experience manager | scope: | eq | version: | 6.3 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for desktop platforms | scope: | ne | version: | 4.4 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.8 | Trust: 0.3 |
| vendor: | ibm | model: | flex system manager | scope: | eq | version: | 1.3.4.0 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.1 | Trust: 0.3 |
| vendor: | cisco | model: | ons series multiservice provisioning platforms | scope: | eq | version: | 154540 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.15 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence sx series ce8.2.2 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | prime collaboration assurance | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ubuntu | model: | linux | scope: | eq | version: | 16.10 | Trust: 0.3 |
| vendor: | cisco | model: | asa next-generation firewall services | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | email security appliance | scope: | ne | version: | 10.0.1 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence server on multiparty media | scope: | eq | version: | 8200 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.9 | Trust: 0.3 |
| vendor: | cisco | model: | unified communications manager im & presence service (formerly c | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | ios and cisco ios xe software | scope: | ne | version: | 16.3 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings for blackberry | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.5 | Trust: 0.3 |
| vendor: | ibm | model: | bigfix platform | scope: | eq | version: | 9.2 | Trust: 0.3 |
| vendor: | cisco | model: | lancope stealthwatch flowcollector sflow | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1g | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | prime lan management solution | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | wide area application services | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security virtual server protection for vmware | scope: | eq | version: | 1.1.0.1 | Trust: 0.3 |
| vendor: | cisco | model: | firesight system software | scope: | ne | version: | 6.0.1.3 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for mac os | scope: | ne | version: | x4.0.7 | Trust: 0.3 |
| vendor: | cisco | model: | common services platform collector | scope: | ne | version: | 1.11 | Trust: 0.3 |
| vendor: | ibm | model: | cognos business intelligence server | scope: | eq | version: | 10.2.1 | Trust: 0.3 |
| vendor: | cisco | model: | partner support service | scope: | eq | version: | 1.0 | Trust: 0.3 |
| vendor: | cisco | model: | media services interface | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus intercloud | scope: | eq | version: | 1000v0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.9 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1i | scope: | - | version: | - | Trust: 0.3 |
| vendor: | mcafee | model: | epolicy orchestrator | scope: | eq | version: | 5.1.3 | Trust: 0.3 |
| vendor: | cisco | model: | prime collaboration assurance | scope: | ne | version: | 11.6 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for iphone and ipad | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway 7.6.2h968406 | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | unified attendant console advanced | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | common services platform collector | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for windows | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence mx series ce8.2.2 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | ibm | model: | spectrum control | scope: | eq | version: | 5.2.8 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings client on-premises | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1s | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | unified wireless ip phone | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified intelligence center | scope: | ne | version: | 11.6(1) | Trust: 0.3 |
| vendor: | cisco | model: | services provisioning platform | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | ucs b-series blade servers | scope: | ne | version: | 3.1.3 | Trust: 0.3 |
| vendor: | cisco | model: | nac appliance clean access manager | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix | scope: | eq | version: | 1.4.6 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 10000 | Trust: 0.3 |
| vendor: | ibm | model: | aix | scope: | eq | version: | 7.2 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment build | scope: | ne | version: | 7.1.1.20290.1 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for android | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | asa next-generation firewall services | scope: | ne | version: | 2.1.2 | Trust: 0.3 |
| vendor: | ibm | model: | mobilefirst platform foundation | scope: | eq | version: | 6.3.0.0 | Trust: 0.3 |
| vendor: | cisco | model: | unified sip proxy | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.405 | Trust: 0.3 |
| vendor: | cisco | model: | unified attendant console premium edition | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | api gateway | scope: | eq | version: | 11.1.2.4.0 | Trust: 0.3 |
| vendor: | oracle | model: | commerce experience manager | scope: | eq | version: | 6.5 | Trust: 0.3 |
| vendor: | cisco | model: | services provisioning platform sfp1.1 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | small business spa300 series ip phones | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | configuration professional | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.8 | Trust: 0.3 |
| vendor: | cisco | model: | mediasense | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql workbench | scope: | eq | version: | 6.1.5 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series high-definition ip cameras | scope: | eq | version: | 40000 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for android | scope: | ne | version: | 11.8 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for desktop platforms | scope: | ne | version: | 4.3.4 | Trust: 0.3 |
| vendor: | cisco | model: | series digital media players 5.3.6 rb3 | scope: | ne | version: | 4400 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series ip cameras | scope: | ne | version: | 30002.9 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.20 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1r | scope: | - | version: | - | Trust: 0.3 |
| vendor: | oracle | model: | mysql workbench | scope: | eq | version: | 6.3.8 | Trust: 0.3 |
| vendor: | ibm | model: | cognos metrics manager | scope: | eq | version: | 10.2 | Trust: 0.3 |
| vendor: | cisco | model: | stealthwatch identity | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | aironet series access points | scope: | ne | version: | 270016.2 | Trust: 0.3 |
| vendor: | cisco | model: | application policy infrastructure controller | scope: | ne | version: | 2.2(1) | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.2 | Trust: 0.3 |
| vendor: | cisco | model: | aironet series access points | scope: | ne | version: | 270016.1 | Trust: 0.3 |
| vendor: | cisco | model: | unified workforce optimization quality management solution 11.5 su1 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | show and share | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system ex series tc7.3.7 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell iuh | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.2 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 2.0.5 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for images | scope: | eq | version: | 7.1.1.19 | Trust: 0.3 |
| vendor: | cisco | model: | ucs director | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for images build | scope: | eq | version: | 7.1.1.20280.6 | Trust: 0.3 |
| vendor: | cisco | model: | jabber client framework components | scope: | ne | version: | 11.8 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence isdn link | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence profile series tc7.3.7 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings client on-premises t32 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | dcm series d9900 digital content manager | scope: | ne | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | ne | version: | 70006.2.19 | Trust: 0.3 |
| vendor: | oracle | model: | commerce guided search | scope: | eq | version: | 6.5.1 | Trust: 0.3 |
| vendor: | cisco | model: | unified attendant console business edition | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | epolicy orchestrator | scope: | eq | version: | 5.3.1 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | eq | version: | 30000 | Trust: 0.3 |
| vendor: | ibm | model: | bigfix platform | scope: | eq | version: | 9.5 | Trust: 0.3 |
| vendor: | ibm | model: | tealeaf customer experience | scope: | eq | version: | 9.0 | Trust: 0.3 |
| vendor: | cisco | model: | aironet series access points | scope: | ne | version: | 270016.4 | Trust: 0.3 |
| vendor: | oracle | model: | peoplesoft enterprise peopletools | scope: | eq | version: | 8.54 | Trust: 0.3 |
| vendor: | ibm | model: | bigfix remote control | scope: | eq | version: | 9.1.2 | Trust: 0.3 |
| vendor: | ibm | model: | powerkvm | scope: | eq | version: | 2.1 | Trust: 0.3 |
| vendor: | oracle | model: | enterprise manager ops center | scope: | eq | version: | 12.1.4 | Trust: 0.3 |
| vendor: | cisco | model: | mds series multilayer switches | scope: | eq | version: | 90000 | Trust: 0.3 |
| vendor: | cisco | model: | prime network services controller 1.01u | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | oracle | model: | oss support tools | scope: | eq | version: | 8.9.15.9.8 | Trust: 0.3 |
| vendor: | cisco | model: | firesight system software | scope: | ne | version: | 5.4.0.10 | Trust: 0.3 |
| vendor: | ibm | model: | worklight consumer edition | scope: | eq | version: | 6.1.0.0 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell series | scope: | eq | version: | 50000 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches 5.2 sv3 | scope: | ne | version: | 1000v | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system tx1310 | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified communications domain manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence server on multiparty media and | scope: | ne | version: | 3103204.4 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 5.0.2 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.1.4 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment build | scope: | ne | version: | 5.1.1051.08 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.10 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2h | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | nac guest server | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | enterprise content delivery system | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1 | Trust: 0.3 |
| vendor: | ibm | model: | cognos business intelligence server | scope: | eq | version: | 10.2.11 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for linux | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.1 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system ex series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | prime collaboration deployment | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | webex business suite | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | dx series ip phones | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | communications network charging and control | scope: | eq | version: | 5.0.1.0 | Trust: 0.3 |
| vendor: | cisco | model: | ios and cisco ios xe software | scope: | ne | version: | 15.5(3) | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.18 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for android | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series blade switches | scope: | eq | version: | 40000 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix | scope: | eq | version: | 1.5.0.11 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | ne | version: | 500-376.1 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for windows | scope: | ne | version: | 11.8 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence profile series ce8.2.2 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | oracle | model: | enterprise manager base platform | scope: | eq | version: | 13.1.0.0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.10 | Trust: 0.3 |
| vendor: | cisco | model: | ace30 application control engine module | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | ne | version: | 5.0.28 | Trust: 0.3 |
| vendor: | cisco | model: | edge digital media player 1.6rb5 | scope: | ne | version: | 300 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.12 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip phone | scope: | eq | version: | 69450 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence isdn gateway mse | scope: | eq | version: | 83210 | Trust: 0.3 |
| vendor: | cisco | model: | wireless lan controller | scope: | ne | version: | 8.4 | Trust: 0.3 |
| vendor: | cisco | model: | jabber software development kit | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | uc integration for microsoft lync | scope: | ne | version: | 11.6.3 | Trust: 0.3 |
| vendor: | cisco | model: | unified contact center enterprise | scope: | ne | version: | 11.6.1 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.404 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system tx1310 | scope: | ne | version: | 6.1 | Trust: 0.3 |
| vendor: | cisco | model: | spa112 2-port phone adapter | scope: | ne | version: | 1.4.2 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment build | scope: | eq | version: | 5.1.151.05 | Trust: 0.3 |
| vendor: | cisco | model: | connected grid routers | scope: | ne | version: | 7.3 | Trust: 0.3 |
| vendor: | oracle | model: | transportation management | scope: | eq | version: | 6.2 | Trust: 0.3 |
| vendor: | oracle | model: | commerce experience manager | scope: | eq | version: | 6.4.1.2 | Trust: 0.3 |
| vendor: | ibm | model: | i | scope: | eq | version: | 7.3 | Trust: 0.3 |
| vendor: | oracle | model: | enterprise manager base platform | scope: | eq | version: | 12.1 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.33 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence mx series tc7.3.7 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | ip interoperability and collaboration system | scope: | ne | version: | 5.0(1) | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1c | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | spa122 analog telephone adapter with router | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell series | scope: | ne | version: | 50003.5.12.23 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell series | scope: | eq | version: | 50003.4.2.0 | Trust: 0.3 |
| vendor: | cisco | model: | connected grid routers | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | uc integration for microsoft lync | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security guardium | scope: | eq | version: | 10.0.1 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1f | scope: | - | version: | - | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.401 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2a | scope: | - | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.8 | Trust: 0.3 |
| vendor: | ibm | model: | bigfix remote control | scope: | ne | version: | 9.1.3 | Trust: 0.3 |
| vendor: | cisco | model: | unity express | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.7 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2f | scope: | - | version: | - | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.21 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 13000 | Trust: 0.3 |
| vendor: | ibm | model: | worklight enterprise edition | scope: | eq | version: | 6.1.0.0 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for images | scope: | eq | version: | 7.1.1.0 | Trust: 0.3 |
| vendor: | cisco | model: | tandberg codian isdn gateway | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway 7.6.405h1165239 | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | jabber guest | scope: | ne | version: | 11 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.9 | Trust: 0.3 |
| vendor: | oracle | model: | business intelligence enterprise edition | scope: | eq | version: | 11.1.1.9.0 | Trust: 0.3 |
| vendor: | cisco | model: | digital media manager 5.3.6 rb3 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | storediq | scope: | eq | version: | 7.6 | Trust: 0.3 |
| vendor: | cisco | model: | series digital media players | scope: | eq | version: | 44000 | Trust: 0.3 |
| vendor: | cisco | model: | ata series analog terminal adaptors | scope: | ne | version: | 1901.3 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings server ssl gateway | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | ibm | model: | integrated management module for bladecenter yuoo | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | prime network services controller | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | ata series analog terminal adaptors | scope: | eq | version: | 1900 | Trust: 0.3 |
| vendor: | cisco | model: | asr series | scope: | ne | version: | 500021.2 | Trust: 0.3 |
| vendor: | cisco | model: | ironport email security appliance | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 500-37 | Trust: 0.3 |
| vendor: | cisco | model: | ons series multiservice provisioning platforms | scope: | ne | version: | 1545410.7 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix | scope: | eq | version: | 1.5.0.12 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system series | scope: | eq | version: | 30000 | Trust: 0.3 |
| vendor: | ibm | model: | cognos metrics manager | scope: | eq | version: | 10.1.1 | Trust: 0.3 |
| vendor: | cisco | model: | broadband access center telco and wireless | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment | scope: | eq | version: | 7.1.1.19 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.2.3 | Trust: 0.3 |
| vendor: | ibm | model: | worklight consumer edition | scope: | eq | version: | 6.1.0.2 | Trust: 0.3 |
| vendor: | cisco | model: | hosted collaboration mediation fulfillment | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified communications manager session management edition | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.19 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry | scope: | eq | version: | 2.4.0 | Trust: 0.3 |
| vendor: | ubuntu | model: | linux lts amd64 | scope: | eq | version: | 12.04 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl | scope: | eq | version: | 1.0.2 | Trust: 0.3 |
| vendor: | ibm | model: | security guardium | scope: | eq | version: | 10.1.2 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.25 | Trust: 0.3 |
| vendor: | ibm | model: | mobilefirst platform foundation | scope: | eq | version: | 7.1.0.0 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings server multimedia platform | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip conference phone 10.3.1sr4 | scope: | ne | version: | 8831 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | eq | version: | 70000 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.1.7 | Trust: 0.3 |
| vendor: | cisco | model: | prime network registrar | scope: | ne | version: | 8.3.5 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2d | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | series stackable managed switches | scope: | eq | version: | 5000 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 1000 | Trust: 0.3 |
| vendor: | cisco | model: | prime access registrar | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | onepk all-in-one vm | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified intelligent contact management enterprise | scope: | ne | version: | 11.6.1 | Trust: 0.3 |
| vendor: | cisco | model: | stealthwatch flowcollector netflow | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.3.2 | Trust: 0.3 |
| vendor: | cisco | model: | ucs manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | communications network charging and control | scope: | eq | version: | 5.0.0.2 | Trust: 0.3 |
| vendor: | mcafee | model: | epolicy orchestrator | scope: | eq | version: | 5.3.2 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 5.0.1 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.11 | Trust: 0.3 |
| vendor: | cisco | model: | prime optical | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | communications network charging and control | scope: | eq | version: | 5.0.0.1 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings server | scope: | eq | version: | 1.0 | Trust: 0.3 |
| vendor: | cisco | model: | network analysis module | scope: | ne | version: | 6.2(2) | Trust: 0.3 |
| vendor: | cisco | model: | series stackable | scope: | eq | version: | 5000 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance 4300e and 4500e high-definition ip cameras | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified attendant console department edition | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ubuntu | model: | linux lts | scope: | eq | version: | 16.04 | Trust: 0.3 |
| vendor: | cisco | model: | ip series phones | scope: | eq | version: | 78000 | Trust: 0.3 |
| vendor: | cisco | model: | aironet series access points | scope: | eq | version: | 27000 | Trust: 0.3 |
| vendor: | cisco | model: | onepk all-in-one virtual machine | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | industrial router | scope: | eq | version: | 9100 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.1 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2 | Trust: 0.3 |
| vendor: | cisco | model: | unified intelligence center | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.2 | Trust: 0.3 |
| vendor: | ibm | model: | aix | scope: | eq | version: | 6.1 | Trust: 0.3 |
| vendor: | cisco | model: | video distribution suite for internet streaming | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | ne | version: | 13006.1 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.7.1 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment | scope: | eq | version: | 5.1.116 | Trust: 0.3 |
| vendor: | cisco | model: | cloupia unified infrastructure controller | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | eq | version: | 50000 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | ne | version: | 11006.1 | Trust: 0.3 |
| vendor: | ibm | model: | flex system manager | scope: | eq | version: | 1.3.20 | Trust: 0.3 |
| vendor: | cisco | model: | packaged contact center enterprise | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | agent desktop for cisco unified contact center express | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | mobilefirst platform foundation | scope: | eq | version: | 8.0.0.0 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry | scope: | eq | version: | 3.1 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series ip cameras | scope: | eq | version: | 70000 | Trust: 0.3 |
| vendor: | cisco | model: | adaptive security appliance | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | secure global desktop | scope: | eq | version: | 5.2 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence sx series tc7.3.7 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | tealeaf customer experience | scope: | eq | version: | 8.0 | Trust: 0.3 |
| vendor: | ibm | model: | cognos metrics manager | scope: | eq | version: | 10.2.1 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.5 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 30000 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1n | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | nac appliance clean access server | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1o | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series ip cameras | scope: | eq | version: | 60000 | Trust: 0.3 |
| vendor: | cisco | model: | firesight system software | scope: | ne | version: | 6.1.0.1 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings for windows phone | scope: | eq | version: | 80 | Trust: 0.3 |
| vendor: | cisco | model: | spa232d multi-line dect analog telephone adapter | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | prime optical for service providers | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | smart care | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | ne | version: | 5.3.1.11 | Trust: 0.3 |
| vendor: | cisco | model: | edge digital media player 1.2rb1.0.3 | scope: | ne | version: | 340 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell cloudbase factory recovery root filesystem | scope: | eq | version: | 2.99.4 | Trust: 0.3 |
| vendor: | cisco | model: | network performance analysis | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | ne | version: | 60006.2.19 | Trust: 0.3 |
| vendor: | oracle | model: | peoplesoft enterprise peopletools | scope: | eq | version: | 8.55 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip conference phone for third-party call control | scope: | eq | version: | 88310 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 5.0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2e | scope: | - | version: | - | Trust: 0.3 |
| vendor: | mcafee | model: | epolicy orchestrator | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings for windows phone | scope: | ne | version: | 82.8 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security guardium | scope: | eq | version: | 10.1 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1q | scope: | - | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | spectrum control | scope: | eq | version: | 5.2.10 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell cloudbase factory recovery root filesystem | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.7 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry | scope: | eq | version: | 2.3.0 | Trust: 0.3 |
| vendor: | cisco | model: | secure access control system | scope: | ne | version: | 5.8.0.32.7 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence integrator c series ce8.2.2 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | oracle | model: | enterprise linux | scope: | eq | version: | 5 | Trust: 0.3 |
| vendor: | cisco | model: | agent desktop | scope: | - | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment intirim fix | scope: | eq | version: | 5.133 | Trust: 0.3 |
| vendor: | oracle | model: | secure global desktop | scope: | eq | version: | 5.3 | Trust: 0.3 |
| vendor: | ibm | model: | cognos business intelligence server | scope: | eq | version: | 10.2.2 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings client hosted | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.13 | Trust: 0.3 |
| vendor: | cisco | model: | content security management appliance | scope: | ne | version: | 6.1.140 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.8 | Trust: 0.3 |
| vendor: | ibm | model: | security virtual server protection for vmware | scope: | eq | version: | 1.1 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 2.0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches 5.2.8 | scope: | ne | version: | 6000 | Trust: 0.3 |
| vendor: | cisco | model: | intrusion prevention system solutions | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip conference phone | scope: | eq | version: | 88310 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.2.1 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.14 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry appliance fp | scope: | eq | version: | 3.1.0.4 | Trust: 0.3 |
| vendor: | cisco | model: | jabber client framework components | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | prime ip express | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified sip proxy software | scope: | ne | version: | 10 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.4 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system tx9000 | scope: | - | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | aix | scope: | eq | version: | 5.3 | Trust: 0.3 |
| vendor: | oracle | model: | mysql workbench | scope: | eq | version: | 6.1.4 | Trust: 0.3 |
| vendor: | cisco | model: | security manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for mac | scope: | ne | version: | 11.8 | Trust: 0.3 |
| vendor: | cisco | model: | netflow generation appliance | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.403 | Trust: 0.3 |
| vendor: | cisco | model: | unified sip proxy software | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql enterprise monitor | scope: | eq | version: | 3.1.4.7895 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip phone | scope: | eq | version: | 99510 | Trust: 0.3 |
| vendor: | cisco | model: | mobility services engine | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | openssh for gpfs | scope: | eq | version: | 3.5 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip phone | scope: | eq | version: | 89450 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence supervisor mse | scope: | eq | version: | 80500 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment build | scope: | eq | version: | 7.1.1.20280.6 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence server and mse | scope: | ne | version: | 701087104.4 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.10 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.6 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.12 | Trust: 0.3 |
| vendor: | cisco | model: | ucs series and series fabric interconnects | scope: | eq | version: | 620063000 | Trust: 0.3 |
| vendor: | oracle | model: | commerce experience manager | scope: | eq | version: | 6.2.2 | Trust: 0.3 |
| vendor: | cisco | model: | webex meeting center | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.11 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 2.0.4 | Trust: 0.3 |
| vendor: | ibm | model: | lotus protector for mail security | scope: | eq | version: | 2.8.3.0 | Trust: 0.3 |
| vendor: | cisco | model: | netflow generation appliance | scope: | ne | version: | 1.1(1) | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.13 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.6 | Trust: 0.3 |
| vendor: | oracle | model: | commerce guided search | scope: | eq | version: | 6.5.2 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.2.2 | Trust: 0.3 |
| vendor: | ibm | model: | enterprise content management system monitor | scope: | eq | version: | 5.1 | Trust: 0.3 |
| vendor: | oracle | model: | secure global desktop | scope: | eq | version: | 4.71 | Trust: 0.3 |
| vendor: | cisco | model: | application networking manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | socialminer | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | powerkvm update | scope: | ne | version: | 2.1.1.3-6513 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.28 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings server | scope: | eq | version: | 2.0 | Trust: 0.3 |
| vendor: | cisco | model: | spa112 2-port phone adapter | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series high-definition ip cameras | scope: | ne | version: | 40002.9 | Trust: 0.3 |
| vendor: | cisco | model: | intracer | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.29 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment build | scope: | eq | version: | 5.1.1051.07 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 2.0.3 | Trust: 0.3 |
| vendor: | cisco | model: | spa51x ip phones | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for windows | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | oss support tools | scope: | eq | version: | 8.8.15.7.15 | Trust: 0.3 |
| vendor: | oracle | model: | transportation management | scope: | eq | version: | 6.1 | Trust: 0.3 |
| vendor: | oracle | model: | communications network charging and control | scope: | eq | version: | 5.0.2.0 | Trust: 0.3 |
| vendor: | oracle | model: | business intelligence enterprise edition | scope: | eq | version: | 12.2.1.3.0 | Trust: 0.3 |
| vendor: | cisco | model: | prime infrastructure | scope: | ne | version: | 3.2 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence video communication server | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance 4300e and 4500e high-definition ip cameras | scope: | ne | version: | 2.9 | Trust: 0.3 |
| vendor: | ibm | model: | powerkvm update | scope: | ne | version: | 3.1.0.23 | Trust: 0.3 |
| vendor: | cisco | model: | computer telephony integration object server | scope: | ne | version: | 11.6.1 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 11000 | Trust: 0.3 |
| vendor: | centos | model: | centos | scope: | eq | version: | 7 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence sx series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence server on multiparty media and | scope: | eq | version: | 3103200 | Trust: 0.3 |
| vendor: | cisco | model: | small business series | scope: | eq | version: | 3000 | Trust: 0.3 |
| vendor: | ibm | model: | enterprise content management system monitor | scope: | eq | version: | 5.2 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.24 | Trust: 0.3 |
| vendor: | ubuntu | model: | linux lts | scope: | eq | version: | 14.04 | Trust: 0.3 |
| vendor: | cisco | model: | content security appliance update servers | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified attendant console | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1 | Trust: 0.3 |
| vendor: | cisco | model: | videoscape anyres live | scope: | ne | version: | 9.7.2 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip phone | scope: | eq | version: | 99710 | Trust: 0.3 |
| vendor: | ubuntu | model: | linux lts i386 | scope: | eq | version: | 12.04 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.6 | Trust: 0.3 |
| vendor: | ibm | model: | security guardium | scope: | eq | version: | 10.0 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment | scope: | eq | version: | 5.1.0.2 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.4 | Trust: 0.3 |
| vendor: | cisco | model: | firesight system software | scope: | ne | version: | 5.4.1.9 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell iuh | scope: | ne | version: | 3.17.3 | Trust: 0.3 |
| vendor: | cisco | model: | ata analog telephone adaptor | scope: | eq | version: | 1870 | Trust: 0.3 |
| vendor: | oracle | model: | solaris sru11.6 | scope: | ne | version: | 11.3 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.1.1 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.2 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1m | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | ios and cisco ios xe software | scope: | ne | version: | 16.4 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | ne | version: | 500-326.1 | Trust: 0.3 |
| vendor: | cisco | model: | unity express | scope: | ne | version: | 10 | Trust: 0.3 |
| vendor: | cisco | model: | expressway series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | virtualization experience media edition | scope: | ne | version: | 11.8 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | ne | version: | 5.1.8 | Trust: 0.3 |
| vendor: | cisco | model: | small business series managed switches | scope: | eq | version: | 3000 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.3.1 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 2.0.6 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | ne | version: | 10006.1 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence isdn gateway | scope: | eq | version: | 32410 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence mcu | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | edge digital media player | scope: | eq | version: | 3000 | Trust: 0.3 |
| vendor: | cisco | model: | series smart plus switches | scope: | eq | version: | 2200 | Trust: 0.3 |
| vendor: | oracle | model: | enterprise manager ops center | scope: | eq | version: | 12.2.2 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry | scope: | eq | version: | 3.2 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry appliance fi | scope: | eq | version: | 2.4.0.4 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | eq | version: | 1000v0 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.5.1 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.1.6 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl | scope: | eq | version: | 1.0.1 | Trust: 0.3 |
| vendor: | cisco | model: | virtual security gateway | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql enterprise monitor | scope: | eq | version: | 3.2.4.1102 | Trust: 0.3 |
| vendor: | oracle | model: | access manager | scope: | eq | version: | 10.1.4.3.0 | Trust: 0.3 |
| vendor: | ibm | model: | rational insight | scope: | eq | version: | 1.1.1.5 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence tx9000 series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry appliance fp | scope: | eq | version: | 3.2.0.4 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1j | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | series digital media players | scope: | eq | version: | 43000 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system series | scope: | ne | version: | 30006.1 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell series | scope: | eq | version: | 70003.4.2.0 | Trust: 0.3 |
| vendor: | cisco | model: | unity connection | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.4 | Trust: 0.3 |
| vendor: | cisco | model: | one portal | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | security manager | scope: | ne | version: | 4.13 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.12 | Trust: 0.3 |
| vendor: | cisco | model: | ucs b-series blade servers | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | vios | scope: | eq | version: | 2.2 | Trust: 0.3 |
| vendor: | cisco | model: | unified attendant console standard | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | ucs standalone c-series rack server integrated management cont | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | ne | version: | 5.3.2.5 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence integrator c series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | spectrum control | scope: | eq | version: | 5.2.9 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1d | scope: | - | version: | - | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.32 | Trust: 0.3 |
| vendor: | cisco | model: | enterprise content delivery system | scope: | ne | version: | 2.6.9 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | eq | version: | 60000 | Trust: 0.3 |
| vendor: | oracle | model: | commerce experience manager | scope: | eq | version: | 6.5.1 | Trust: 0.3 |
| vendor: | cisco | model: | mds series multilayer switches 5.2.8 | scope: | ne | version: | 9000 | Trust: 0.3 |
| vendor: | cisco | model: | series digital media players 5.4.1 rb4 | scope: | ne | version: | 4300 | Trust: 0.3 |
| vendor: | cisco | model: | ucs standalone c-series rack server integrated management cont | scope: | ne | version: | -3.0 | Trust: 0.3 |
| vendor: | mcafee | model: | epolicy orchestrator | scope: | eq | version: | 5.1.1 | Trust: 0.3 |
| vendor: | cisco | model: | ios and cisco ios xe software | scope: | ne | version: | 16.1 | Trust: 0.3 |
| vendor: | cisco | model: | prime network | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence tx9000 series | scope: | ne | version: | 6.1 | Trust: 0.3 |
| vendor: | cisco | model: | prime performance manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | tealeaf customer experience on cloud network capture add-on | scope: | eq | version: | 16.1.01 | Trust: 0.3 |
| vendor: | cisco | model: | smart net total care local collector appliance | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | cisco | model: | prime collaboration provisioning | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.12 | Trust: 0.3 |
| vendor: | cisco | model: | connected grid routers | scope: | ne | version: | 15.8.9 | Trust: 0.3 |
| vendor: | cisco | model: | network analysis module | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | integrated management module for system yuoo | scope: | eq | version: | x | Trust: 0.3 |
| vendor: | oracle | model: | commerce experience manager | scope: | eq | version: | 6.5.2 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series fabric switches aci mode | scope: | eq | version: | 9000-0 | Trust: 0.3 |
| vendor: | cisco | model: | prime performance manager sp1611 | scope: | ne | version: | 1.7 | Trust: 0.3 |
| vendor: | ibm | model: | worklight consumer edition | scope: | eq | version: | 6.1.0.1 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.12 | Trust: 0.3 |
| vendor: | cisco | model: | lancope stealthwatch flowcollector netflow | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.22 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip phone 9.3 sr3 | scope: | ne | version: | 6901 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.23 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.16 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.10 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence server and mse | scope: | eq | version: | 701087100 | Trust: 0.3 |
| vendor: | cisco | model: | identity services engine | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | mds series multilayer switches | scope: | ne | version: | 90006.2.19 | Trust: 0.3 |
| vendor: | cisco | model: | aironet series access points | scope: | ne | version: | 270015.5(3) | Trust: 0.3 |
| vendor: | ibm | model: | bigfix platform | scope: | eq | version: | 9.1 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 500-32 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.30 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.4 | Trust: 0.3 |
| vendor: | ibm | model: | spectrum control | scope: | eq | version: | 5.2.11 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence server on virtual machine | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql enterprise monitor | scope: | eq | version: | 3.3.0.1098 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings for android | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches 5.2.8 | scope: | ne | version: | 5000 | Trust: 0.3 |
| vendor: | cisco | model: | digital media manager 5.4.1 rb4 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | unified workforce optimization quality management solution | scope: | eq | version: | -0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence integrator c series tc7.3.7 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment | scope: | eq | version: | 5.1.3 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.13 | Trust: 0.3 |
| vendor: | cisco | model: | spa122 analog telephone adapter with router | scope: | ne | version: | 1.4.2 | Trust: 0.3 |
| vendor: | cisco | model: | cloud object storage | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix | scope: | eq | version: | 1.4 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.5 | Trust: 0.3 |
| vendor: | ibm | model: | rrdi | scope: | eq | version: | 2.0.1 | Trust: 0.3 |
| vendor: | ibm | model: | worklight enterprise edition | scope: | eq | version: | 6.1.0.2 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.14 | Trust: 0.3 |
| vendor: | cisco | model: | ios xr software | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.3 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.4 | Trust: 0.3 |
| vendor: | cisco | model: | unified intelligent contact management enterprise | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.2.4 | Trust: 0.3 |
| vendor: | cisco | model: | application and content networking system | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1k | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for ios | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | business intelligence enterprise edition | scope: | eq | version: | 11.1.1.7.0 | Trust: 0.3 |
| vendor: | cisco | model: | ace application control engine | scope: | eq | version: | 47100 | Trust: 0.3 |
| vendor: | oracle | model: | oss support tools | scope: | ne | version: | 8.15.17.3.14 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for mac os | scope: | eq | version: | x0 | Trust: 0.3 |
| vendor: | oracle | model: | business intelligence enterprise edition | scope: | eq | version: | 12.2.1.2.0 | Trust: 0.3 |
| vendor: | oracle | model: | commerce guided search | scope: | eq | version: | 6.4.1.2 | Trust: 0.3 |
| vendor: | ibm | model: | tealeaf customer experience | scope: | eq | version: | 9.0.2 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1b | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | prime infrastructure plug and play standalone gateway | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.2 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for images build | scope: | ne | version: | 7.1.1.20290.1 | Trust: 0.3 |
| vendor: | cisco | model: | virtual security gateway | scope: | ne | version: | 2.1.6 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series switches | scope: | ne | version: | 50006.2.19 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence conductor | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.3 | Trust: 0.3 |
| vendor: | cisco | model: | application policy infrastructure controller | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for mac | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | jabber for iphone and ipad | scope: | ne | version: | 11.8 | Trust: 0.3 |
| vendor: | cisco | model: | prime network registrar | scope: | ne | version: | 9.0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.3 | Trust: 0.3 |
| vendor: | ibm | model: | cognos metrics manager | scope: | eq | version: | 10.2.2 | Trust: 0.3 |
| vendor: | ibm | model: | i | scope: | eq | version: | 7.1 | Trust: 0.3 |
| vendor: | ibm | model: | worklight enterprise edition | scope: | eq | version: | 6.1.0.1 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence video communication server | scope: | ne | version: | x8.8.3 | Trust: 0.3 |
| vendor: | cisco | model: | jabber | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | connected analytics for collaboration | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.16 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.4.1 | Trust: 0.3 |
| vendor: | cisco | model: | series digital media players 5.4.1 rb4 | scope: | ne | version: | 4400 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:express for unix | scope: | eq | version: | 1.5.0 | Trust: 0.3 |
| vendor: | cisco | model: | multicast manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | aironet series access points | scope: | ne | version: | 270016.3 | Trust: 0.3 |
| vendor: | ibm | model: | cognos business intelligence server | scope: | eq | version: | 10.2 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for ios | scope: | ne | version: | 4.0.7 | Trust: 0.3 |
| vendor: | cisco | model: | secure access control system | scope: | ne | version: | 5.8.0.32.8 | Trust: 0.3 |
| vendor: | cisco | model: | webex node for mcs | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence mcu | scope: | ne | version: | 4.5(1.89) | Trust: 0.3 |
| vendor: | cisco | model: | management appliance | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | anyconnect secure mobility client for windows | scope: | ne | version: | 4.0.7 | Trust: 0.3 |
| vendor: | cisco | model: | videoscape anyres live | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance ptz ip cameras | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | video distribution suite for internet streaming | scope: | ne | version: | 4.003(002) | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.31 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence serial gateway series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence server on multiparty media | scope: | ne | version: | 8204.4 | Trust: 0.3 |
| vendor: | ibm | model: | i | scope: | eq | version: | 7.2 | Trust: 0.3 |
| vendor: | ibm | model: | sterling connect:direct for hp nonstop | scope: | eq | version: | 3.6 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.3 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2c | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | virtual security gateway for microsoft hyper-v | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.13 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.400 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip phone | scope: | eq | version: | 89610 | Trust: 0.3 |
| vendor: | cisco | model: | expressway series | scope: | ne | version: | x8.8.3 | Trust: 0.3 |
| vendor: | oracle | model: | commerce guided search | scope: | eq | version: | 6.3 | Trust: 0.3 |
| vendor: | cisco | model: | prime network | scope: | ne | version: | 431 | Trust: 0.3 |
| vendor: | ibm | model: | aix | scope: | eq | version: | 7.1 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 500-320 | Trust: 0.3 |
| vendor: | cisco | model: | unified attendant console enterprise edition | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | unified contact center express | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | small business spa500 series ip phones | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | vm virtualbox | scope: | eq | version: | 5.0.26 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for os deployment | scope: | eq | version: | 7.1.1 | Trust: 0.3 |
| vendor: | cisco | model: | network analysis module 6.2 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system ex series ce8.2.2 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | prime data center network manager | scope: | eq | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | mxe series media experience engines | scope: | eq | version: | 35000 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.2b | scope: | - | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell cloudbase factory recovery root filesystem | scope: | ne | version: | 3.17.3 | Trust: 0.3 |
| vendor: | cisco | model: | videoscape control suite | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 1100 | Trust: 0.3 |
| vendor: | cisco | model: | unified communications manager | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | tandberg codian mse | scope: | eq | version: | 83200 | Trust: 0.3 |
| vendor: | cisco | model: | ip series phones vpn feature | scope: | eq | version: | 8800-0 | Trust: 0.3 |
| vendor: | ibm | model: | flex system manager | scope: | eq | version: | 1.3.3.0 | Trust: 0.3 |
| vendor: | ibm | model: | mobilefirst platform foundation | scope: | eq | version: | 7.0.0.0 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.9 | Trust: 0.3 |
| vendor: | ibm | model: | security network protection | scope: | eq | version: | 5.3.1.3 | Trust: 0.3 |
| vendor: | cisco | model: | emergency responder | scope: | - | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry | scope: | eq | version: | 2.2 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.27 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.17 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.18 | Trust: 0.3 |
| vendor: | oracle | model: | enterprise manager base platform | scope: | eq | version: | 13.2.0.0 | Trust: 0.3 |
| vendor: | ibm | model: | tealeaf customer experience | scope: | eq | version: | 8.6 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | ne | version: | 7.6.406-3402.103 | Trust: 0.3 |
| vendor: | cisco | model: | unified meetingplace 8.6mr1 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | cisco | model: | telepresence mx series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | tapi service provider | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | video surveillance series ip cameras | scope: | ne | version: | 70002.9 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence system | scope: | eq | version: | 500-370 | Trust: 0.3 |
| vendor: | cisco | model: | spa525g 5-line ip phone | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | telepresence profile series | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | secure access control system | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.6.22 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip conference phone for third-party call control 9.3 sr3 | scope: | ne | version: | 8831 | Trust: 0.3 |
| vendor: | cisco | model: | unified ip series phones | scope: | eq | version: | 79000 | Trust: 0.3 |
| vendor: | cisco | model: | spa232d multi-line dect analog telephone adapter | scope: | ne | version: | 1.4.2 | Trust: 0.3 |
| vendor: | cisco | model: | nexus series fabric switches aci mode | scope: | ne | version: | 9000-0 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.6 | Trust: 0.3 |
| vendor: | cisco | model: | visual quality experience tools server | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | virtualization experience media edition | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | oracle | model: | enterprise manager ops center | scope: | eq | version: | 12.3.2 | Trust: 0.3 |
| vendor: | cisco | model: | emergency responder | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway 7.6.405h1157986 | scope: | - | version: | - | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1l | scope: | - | version: | - | Trust: 0.3 |
| vendor: | ibm | model: | tivoli storage productivity center | scope: | eq | version: | 5.2.7 | Trust: 0.3 |
| vendor: | cisco | model: | registered envelope service | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | universal small cell series | scope: | ne | version: | 70003.5.12.23 | Trust: 0.3 |
| vendor: | cisco | model: | firesight system software | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | cisco | model: | physical access gateways | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | smartcloud entry appliance fi | scope: | eq | version: | 2.3.0.4 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings client hosted t32 | scope: | ne | version: | - | Trust: 0.3 |
| vendor: | oracle | model: | mysql | scope: | eq | version: | 5.7.15 | Trust: 0.3 |
| vendor: | cisco | model: | unified meetingplace | scope: | eq | version: | 0 | Trust: 0.3 |
| vendor: | ibm | model: | security virtual server protection for vmware | scope: | eq | version: | 1.1.1 | Trust: 0.3 |
| vendor: | cisco | model: | unified contact center express | scope: | ne | version: | 11.6 | Trust: 0.3 |
| vendor: | cisco | model: | webex meetings server | scope: | ne | version: | 2.6.1.30 | Trust: 0.3 |
| vendor: | ibm | model: | tivoli provisioning manager for images system edition | scope: | eq | version: | x7.1.1.0 | Trust: 0.3 |
| vendor: | oracle | model: | communications network charging and control | scope: | eq | version: | 4.4.1.5.0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1h | scope: | - | version: | - | Trust: 0.3 |
| vendor: | mcafee | model: | email gateway | scope: | eq | version: | 7.6.402 | Trust: 0.3 |
| vendor: | mcafee | model: | epolicy orchestrator | scope: | eq | version: | 5.3.0 | Trust: 0.3 |
| vendor: | openssl | model: | project openssl 1.0.1p | scope: | - | version: | - | Trust: 0.3 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-190 | Trust: 1.0 |
THREAT TYPE
remote
Trust: 0.9
TYPE
input validation error
Trust: 0.6
PATCH
| title: | OpenSSL Security vulnerabilities | url: | http://123.124.177.30/web/xxk/bdxqById.tag?id=62223 | Trust: 0.6 |
| title: | Red Hat: Important: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update | url: | https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20171659 - Security Advisory | Trust: 0.1 |
| title: | Red Hat: Important: Red Hat JBoss Enterprise Application Platform 6.4.16 natives update | url: | https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20171658 - Security Advisory | Trust: 0.1 |
| title: | Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 7 | url: | https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20170194 - Security Advisory | Trust: 0.1 |
| title: | Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6 | url: | https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20170193 - Security Advisory | Trust: 0.1 |
| title: | Red Hat: Important: openssl security update | url: | https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20161940 - Security Advisory | Trust: 0.1 |
| title: | Red Hat: CVE-2016-2177 | url: | https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database&qid=CVE-2016-2177 | Trust: 0.1 |
| title: | Arch Linux Issues: | url: | https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues&qid=CVE-2016-2177 | Trust: 0.1 |
| title: | Ubuntu Security Notice: openssl vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-3181-1 | Trust: 0.1 |
| title: | Ubuntu Security Notice: openssl vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-3087-1 | Trust: 0.1 |
| title: | Ubuntu Security Notice: openssl regression | url: | https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-3087-2 | Trust: 0.1 |
| title: | Amazon Linux AMI: ALAS-2016-755 | url: | https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2016-755 | Trust: 0.1 |
| title: | Arch Linux Advisories: [ASA-201609-23] openssl: multiple issues | url: | https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories&qid=ASA-201609-23 | Trust: 0.1 |
| title: | Arch Linux Advisories: [ASA-201609-24] lib32-openssl: multiple issues | url: | https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories&qid=ASA-201609-24 | Trust: 0.1 |
| title: | Red Hat: Important: Red Hat JBoss Core Services Apache HTTP 2.4.23 Release | url: | https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20162957 - Security Advisory | Trust: 0.1 |
| title: | Oracle: Oracle Critical Patch Update Advisory - January 2017 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=69e9536e77203a3c76b24dd89f4f9300 | Trust: 0.1 |
| title: | Tenable Security Advisories: [R7] Nessus 6.9 Fixes Multiple Vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2016-16 | Trust: 0.1 |
| title: | Symantec Security Advisories: SA132 : OpenSSL Vulnerabilities 22-Sep-2016 and 26-Sep-2016 | url: | https://vulmon.com/vendoradvisory?qidtp=symantec_security_advisories&qid=1e6dcaf5dac6ef96a7d917a8c1393040 | Trust: 0.1 |
| title: | Cisco: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016 | url: | https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-20160927-openssl | Trust: 0.1 |
| title: | Oracle: Oracle Critical Patch Update Advisory - October 2016 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=05aabe19d38058b7814ef5514aab4c0c | Trust: 0.1 |
| title: | Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - July 2016 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=ac5af5dd99788925425f5747ec672707 | Trust: 0.1 |
| title: | Tenable Security Advisories: [R3] PVS 5.2.0 Fixes Multiple Third-party Library Vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2016-20 | Trust: 0.1 |
| title: | Tenable Security Advisories: [R2] LCE 4.8.2 Fixes Multiple Third-party Library Vulnerabilities | url: | https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2016-21 | Trust: 0.1 |
| title: | Oracle: Oracle Critical Patch Update Advisory - July 2017 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=2f446a7e1ea263c0c3a365776c6713f2 | Trust: 0.1 |
| title: | Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - April 2017 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=a31bff03e9909229fd67996884614fdf | Trust: 0.1 |
| title: | Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - April 2016 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=976a4da35d55283870dbb31b88a6c655 | Trust: 0.1 |
| title: | Oracle: Oracle Critical Patch Update Advisory - January 2018 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=e2a7f287e9acc8c64ab3df71130bc64d | Trust: 0.1 |
| title: | Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - July 2018 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=586e6062440cdd312211d748e028164e | Trust: 0.1 |
| title: | Oracle VM Server for x86 Bulletins: Oracle VM Server for x86 Bulletin - October 2016 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_vm_server_for_x86_bulletins&qid=21c0efa2643d707e2f50a501209eb75c | Trust: 0.1 |
| title: | Oracle Linux Bulletins: Oracle Linux Bulletin - October 2016 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins&qid=13f3551b67d913fba90df4b2c0dae0bf | Trust: 0.1 |
| title: | Oracle: Oracle Critical Patch Update Advisory - April 2018 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=4019ca77f50c7a34e4d97833e6f3321e | Trust: 0.1 |
| title: | Oracle: Oracle Critical Patch Update Advisory - April 2017 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=143b3fb255063c81571469eaa3cf0a87 | Trust: 0.1 |
| title: | Oracle: Oracle Critical Patch Update Advisory - October 2017 | url: | https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=523d3f220a64ff01dd95e064bd37566a | Trust: 0.1 |
| title: | CVE Scanning of Alpine base images using Multi Stage builds in Docker 17.05 Summary | url: | https://github.com/tomwillfixit/alpine-cvecheck | Trust: 0.1 |
| title: | hackerone-publicy-disclosed | url: | https://github.com/imhunterand/hackerone-publicy-disclosed | Trust: 0.1 |
| title: | OpenSSL-CVE-lib | url: | https://github.com/chnzzh/OpenSSL-CVE-lib | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2016-2177 | Trust: 2.8 |
| db: | MCAFEE | id: | SB10165 | Trust: 2.0 |
| db: | BID | id: | 91319 | Trust: 2.0 |
| db: | SECTRACK | id: | 1036088 | Trust: 1.7 |
| db: | OPENWALL | id: | OSS-SECURITY/2016/06/08/9 | Trust: 1.7 |
| db: | MCAFEE | id: | SB10215 | Trust: 1.7 |
| db: | SCHNEIDER | id: | SEVD-2018-144-01 | Trust: 1.7 |
| db: | SCHNEIDER | id: | SEVD-2018-137-01 | Trust: 1.7 |
| db: | SIEMENS | id: | SSA-412672 | Trust: 1.7 |
| db: | TENABLE | id: | TNS-2016-20 | Trust: 1.7 |
| db: | TENABLE | id: | TNS-2016-21 | Trust: 1.7 |
| db: | TENABLE | id: | TNS-2016-16 | Trust: 1.7 |
| db: | ICS CERT | id: | ICSA-18-144-01 | Trust: 1.7 |
| db: | JUNIPER | id: | JSA10759 | Trust: 1.7 |
| db: | PULSESECURE | id: | SA40312 | Trust: 1.7 |
| db: | AUSCERT | id: | ESB-2022.0696 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-201606-266 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2016-2177 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 140717 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 143176 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 140056 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 138820 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 138826 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 140716 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 140182 | Trust: 0.1 |
| db: | PACKETSTORM | id: | 140850 | Trust: 0.1 |
REFERENCES
| url: | http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20160927-openssl | Trust: 2.6 |
| url: | http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html | Trust: 2.0 |
| url: | https://kc.mcafee.com/corporate/index?page=content&id=sb10165 | Trust: 2.0 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21995039 | Trust: 2.0 |
| url: | http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html | Trust: 2.0 |
| url: | http://www.ubuntu.com/usn/usn-3087-1 | Trust: 1.9 |
| url: | https://security.gentoo.org/glsa/201612-16 | Trust: 1.8 |
| url: | https://access.redhat.com/errata/rhsa-2017:0194 | Trust: 1.8 |
| url: | https://access.redhat.com/errata/rhsa-2017:0193 | Trust: 1.8 |
| url: | http://rhn.redhat.com/errata/rhsa-2017-1659.html | Trust: 1.8 |
| url: | http://rhn.redhat.com/errata/rhsa-2016-2957.html | Trust: 1.8 |
| url: | https://ics-cert.us-cert.gov/advisories/icsa-18-144-01 | Trust: 1.8 |
| url: | http://www.ubuntu.com/usn/usn-3181-1 | Trust: 1.8 |
| url: | http://www.ubuntu.com/usn/usn-3087-2 | Trust: 1.8 |
| url: | https://bugzilla.redhat.com/show_bug.cgi?id=1341705 | Trust: 1.7 |
| url: | http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html | Trust: 1.7 |
| url: | https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05302448 | Trust: 1.7 |
| url: | http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html | Trust: 1.7 |
| url: | http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html | Trust: 1.7 |
| url: | http://www.securityfocus.com/bid/91319 | Trust: 1.7 |
| url: | http://www.securitytracker.com/id/1036088 | Trust: 1.7 |
| url: | http://www.splunk.com/view/sp-caaapue | Trust: 1.7 |
| url: | http://www.splunk.com/view/sp-caaapsv | Trust: 1.7 |
| url: | https://kb.pulsesecure.net/articles/pulse_security_advisories/sa40312 | Trust: 1.7 |
| url: | https://bto.bluecoat.com/security-advisory/sa132 | Trust: 1.7 |
| url: | http://kb.juniper.net/infocenter/index?page=content&id=jsa10759 | Trust: 1.7 |
| url: | https://www.tenable.com/security/tns-2016-16 | Trust: 1.7 |
| url: | https://h20566.www2.hpe.com/hpsc/doc/public/display?doclocale=en_us&docid=emr_na-hpesbhf03763en_us | Trust: 1.7 |
| url: | http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html | Trust: 1.7 |
| url: | http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html | Trust: 1.7 |
| url: | https://www.tenable.com/security/tns-2016-21 | Trust: 1.7 |
| url: | https://www.tenable.com/security/tns-2016-20 | Trust: 1.7 |
| url: | https://security.freebsd.org/advisories/freebsd-sa-16:26.openssl.asc | Trust: 1.7 |
| url: | https://access.redhat.com/errata/rhsa-2017:1658 | Trust: 1.7 |
| url: | http://rhn.redhat.com/errata/rhsa-2016-1940.html | Trust: 1.7 |
| url: | http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html | Trust: 1.7 |
| url: | https://www.schneider-electric.com/en/download/document/sevd-2018-144-01/ | Trust: 1.7 |
| url: | https://www.schneider-electric.com/en/download/document/sevd-2018-137-01/ | Trust: 1.7 |
| url: | https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager | Trust: 1.7 |
| url: | https://support.hpe.com/hpsc/doc/public/display?doclocale=en_us&docid=emr_na-hpesbhf03856en_us | Trust: 1.7 |
| url: | https://kc.mcafee.com/corporate/index?page=content&id=sb10215 | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html | Trust: 1.7 |
| url: | https://support.f5.com/csp/article/k23873366 | Trust: 1.7 |
| url: | http://www.debian.org/security/2016/dsa-3673 | Trust: 1.7 |
| url: | http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html | Trust: 1.7 |
| url: | https://support.hpe.com/hpsc/doc/public/display?doclocale=en&docid=emr_na-hpesbhf03856en_us | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html | Trust: 1.7 |
| url: | https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24 | Trust: 1.7 |
| url: | http://www.openwall.com/lists/oss-security/2016/06/08/9 | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html | Trust: 1.7 |
| url: | http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html | Trust: 1.7 |
| url: | http://seclists.org/fulldisclosure/2017/jul/31 | Trust: 1.7 |
| url: | https://h20566.www2.hpe.com/hpsc/doc/public/display?doclocale=en_us&docid=emr_na-c05302448 | Trust: 1.7 |
| url: | http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html | Trust: 1.7 |
| url: | http://www.securityfocus.com/archive/1/540957/100/0/threaded | Trust: 1.7 |
| url: | https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf | Trust: 1.7 |
| url: | https://git.openssl.org/?p=openssl.git%3ba=commit%3bh=a004e72b95835136d3f1ea90517f706c24c03da7 | Trust: 1.1 |
| url: | https://git.openssl.org/?p=openssl.git;a=commit;h=a004e72b95835136d3f1ea90517f706c24c03da7 | Trust: 0.9 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2177 | Trust: 0.7 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2178 | Trust: 0.6 |
| url: | https://www.openssl.org/news/vulnerabilities.html#y2017 | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2022.0696 | Trust: 0.6 |
| url: | https://access.redhat.com/security/updates/classification/#important | Trust: 0.4 |
| url: | https://access.redhat.com/security/cve/cve-2016-2177 | Trust: 0.4 |
| url: | https://access.redhat.com/security/team/contact/ | Trust: 0.4 |
| url: | https://www.redhat.com/mailman/listinfo/rhsa-announce | Trust: 0.4 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2108 | Trust: 0.4 |
| url: | https://bugzilla.redhat.com/): | Trust: 0.4 |
| url: | https://access.redhat.com/security/cve/cve-2016-2178 | Trust: 0.4 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-6304 | Trust: 0.4 |
| url: | https://github.com/openssl/openssl/commit/a004e72b95835136d3f1ea90517f706c24c03da7 | Trust: 0.3 |
| url: | http://openssl.org/ | Trust: 0.3 |
| url: | http://aix.software.ibm.com/aix/efixes/security/openssl_advisory21.asc | Trust: 0.3 |
| url: | https://www.ibm.com/blogs/psirt/ibm-security-bulletin-multiple-vulnerabilities-in-openssl-affect-ibm-worklight-and-ibm-mobilefirst-platform-foundation-2/ | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=isg3t1024394 | Trust: 0.3 |
| url: | http://www.ibm.com/support/docview.wss?uid=isg3t1024401 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=isg3t1024507 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=isg3t1024648 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=nas8n1021643 | Trust: 0.3 |
| url: | http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html | Trust: 0.3 |
| url: | http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html | Trust: 0.3 |
| url: | http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html | Trust: 0.3 |
| url: | https://kc.mcafee.com/resources/sites/mcafee/content/live/product_documentation/27000/pd27128/en_us/meg_7_6_406_3402_103_release_notes_en_us.pdf | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21995935 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21991896 | Trust: 0.3 |
| url: | https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5099492 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21994870 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21991724 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21992348 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21992898 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21993061 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21993601 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21993856 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21993875 | Trust: 0.3 |
| url: | http://www.ibm.com/support/docview.wss?uid=swg21994534 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21994861 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21995038 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21995129 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21995392 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21995393 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg21995691 | Trust: 0.3 |
| url: | http://www-01.ibm.com/support/docview.wss?uid=swg22001805 | Trust: 0.3 |
| url: | https://access.redhat.com/security/cve/cve-2016-4459 | Trust: 0.3 |
| url: | https://access.redhat.com/security/cve/cve-2016-6808 | Trust: 0.3 |
| url: | https://access.redhat.com/security/cve/cve-2016-8612 | Trust: 0.3 |
| url: | https://access.redhat.com/security/cve/cve-2016-2108 | Trust: 0.3 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2180 | Trust: 0.3 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-6306 | Trust: 0.3 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2183 | Trust: 0.3 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-4459 | Trust: 0.2 |
| url: | https://access.redhat.com/articles/11258 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-8612 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-6808 | Trust: 0.2 |
| url: | https://access.redhat.com/security/team/key/ | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-8610 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2107 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2109 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2106 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2105 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-6302 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2181 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2182 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-6303 | Trust: 0.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2179 | Trust: 0.2 |
| url: | https://cwe.mitre.org/data/definitions/190.html | Trust: 0.1 |
| url: | https://access.redhat.com/errata/rhsa-2017:1659 | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
| url: | https://usn.ubuntu.com/3181-1/ | Trust: 0.1 |
| url: | http://tools.cisco.com/security/center/viewalert.x?alertid=49001 | Trust: 0.1 |
| url: | https://access.redhat.com/documentation/en/jboss-enterprise-application-platform/ | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-6304 | Trust: 0.1 |
| url: | https://access.redhat.com/articles/2688611 | Trust: 0.1 |
| url: | https://access.redhat.com/solutions/222023 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-8610 | Trust: 0.1 |
| url: | https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?product=appplatform&downloadtype=securitypatches&version=6.4 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2105 | Trust: 0.1 |
| url: | https://security.gentoo.org/ | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2183 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2107 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2178 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2176 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-7052 | Trust: 0.1 |
| url: | http://creativecommons.org/licenses/by-sa/2.5 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6304 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6305 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2106 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2108 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7052 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2109 | Trust: 0.1 |
| url: | http://eprint.iacr.org/2016/594.pdf | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-6305 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-2176 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2180 | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-2177 | Trust: 0.1 |
| url: | https://bugs.gentoo.org. | Trust: 0.1 |
| url: | http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6306 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.37 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.1f-1ubuntu2.20 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu4.4 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.1f-1ubuntu2.21 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.38 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu4.5 | Trust: 0.1 |
| url: | https://launchpad.net/bugs/1626883 | Trust: 0.1 |
| url: | https://issues.jboss.org/): | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-0705 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2015-3196 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-4448 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2015-3216 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-2106 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-0702 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-0797 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2014-8176 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1835 | Trust: 0.1 |
| url: | https://access.redhat.com/documentation/en/red-hat-jboss-core-services-apache-http-server/version-2.4.23/apache-http-server-2423-release-notes/ | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-3705 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1838 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-2107 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-0799 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2015-3196 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1839 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2014-3523 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-4483 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2014-3523 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-2842 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2012-1148 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1840 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-0797 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2015-3185 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1836 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-0705 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2015-3185 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2015-3194 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1833 | Trust: 0.1 |
| url: | https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?product=core.service.apachehttp&downloadtype=distributions&version=2.4.23 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-2105 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2014-8176 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1840 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1836 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1762 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1835 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-4449 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2015-0286 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1762 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-5420 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2015-3194 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2015-0286 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-3627 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2012-1148 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1837 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-2109 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-1834 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2015-3195 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2015-0209 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1837 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1839 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-5419 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2015-0209 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2015-3195 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-0702 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2015-3216 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1838 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1833 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-1834 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-4447 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-7141 | Trust: 0.1 |
| url: | https://access.redhat.com/security/cve/cve-2016-0799 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu4.6 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu9.1 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.1f-1ubuntu2.22 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2017-3731 | Trust: 0.1 |
| url: | https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.39 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-7056 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2016-7055 | Trust: 0.1 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2017-3732 | Trust: 0.1 |
CREDITS
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
Trust: 0.6
SOURCES
| db: | VULMON | id: | CVE-2016-2177 |
| db: | BID | id: | 91319 |
| db: | PACKETSTORM | id: | 140717 |
| db: | PACKETSTORM | id: | 143176 |
| db: | PACKETSTORM | id: | 140056 |
| db: | PACKETSTORM | id: | 138820 |
| db: | PACKETSTORM | id: | 138826 |
| db: | PACKETSTORM | id: | 140716 |
| db: | PACKETSTORM | id: | 140182 |
| db: | PACKETSTORM | id: | 140850 |
| db: | CNNVD | id: | CNNVD-201606-266 |
| db: | NVD | id: | CVE-2016-2177 |
LAST UPDATE DATE
2024-11-19T21:31:41.415000+00:00
SOURCES UPDATE DATE
| db: | VULMON | id: | CVE-2016-2177 | date: | 2023-11-07T00:00:00 |
| db: | BID | id: | 91319 | date: | 2018-02-05T14:00:00 |
| db: | CNNVD | id: | CNNVD-201606-266 | date: | 2022-12-14T00:00:00 |
| db: | NVD | id: | CVE-2016-2177 | date: | 2023-11-07T02:31:01.273 |
SOURCES RELEASE DATE
| db: | VULMON | id: | CVE-2016-2177 | date: | 2016-06-20T00:00:00 |
| db: | BID | id: | 91319 | date: | 2016-05-05T00:00:00 |
| db: | PACKETSTORM | id: | 140717 | date: | 2017-01-25T21:53:32 |
| db: | PACKETSTORM | id: | 143176 | date: | 2017-06-28T22:12:00 |
| db: | PACKETSTORM | id: | 140056 | date: | 2016-12-07T16:37:31 |
| db: | PACKETSTORM | id: | 138820 | date: | 2016-09-22T22:25:00 |
| db: | PACKETSTORM | id: | 138826 | date: | 2016-09-23T19:19:00 |
| db: | PACKETSTORM | id: | 140716 | date: | 2017-01-25T21:53:15 |
| db: | PACKETSTORM | id: | 140182 | date: | 2016-12-16T16:34:49 |
| db: | PACKETSTORM | id: | 140850 | date: | 2017-02-01T00:36:45 |
| db: | CNNVD | id: | CNNVD-201606-266 | date: | 2016-06-13T00:00:00 |
| db: | NVD | id: | CVE-2016-2177 | date: | 2016-06-20T01:59:02.087 |