PT-2017-7835 · Symantec · Symantec Ssl Visibility

Publicado 2017-04-11 · Atualizado 2018-02-24 · CVE-2016-10259

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Symantec SSL Visibility (SSLV) versions 3.8.4FC through 3.10 before 3.10.4.1 Symantec SSL Visibility (SSLV) versions 3.11 before 3.11.3.1

Description The issue allows a malicious SSL client to temporarily exhaust the TCP connection pool of an SSL server under certain circumstances, impacting the SSL servers for intercepted SSL connections.

Recommendations For Symantec SSL Visibility (SSLV) versions 3.8.4FC through 3.10 before 3.10.4.1, update to version 3.10.4.1 or later. For Symantec SSL Visibility (SSLV) versions 3.11 before 3.11.3.1, update to version 3.11.3.1 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-10259

Produtos afetados

Symantec Ssl Visibility

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-10259 · Nota de Segurança
• https://bto.bluecoat.com/security-advisory/sa142 · Aviso do Fabricante
• http://securityfocus.com/bid/97525 · Nota
• https://osv.dev/vulnerability/CVE-2016-10259 · Aviso do Fabricante
• https://symantec.com/security-center/network-protection-security-advisories/SA142 · Nota