PT-2017-8332 · Red Hat+2 · Red Hat Enterprise Linux Workstation 7+6

Adam Mariš · Publicado 2016-05-21 · Atualizado 2024-06-15 · CVE-2016-3099

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux Desktop 7 Red Hat Enterprise Linux HPC Node 7 Red Hat Enterprise Linux Server 7 Red Hat Enterprise Linux Workstation 7

Description The issue allows remote attackers to force the use of ciphers that were not intended to be enabled, potentially leading to security risks.

Recommendations For Red Hat Enterprise Linux Desktop 7, update the mod ns configuration to disable the unintended ciphers. For Red Hat Enterprise Linux HPC Node 7, update the mod ns configuration to disable the unintended ciphers. For Red Hat Enterprise Linux Server 7, update the mod ns configuration to disable the unintended ciphers. For Red Hat Enterprise Linux Workstation 7, update the mod ns configuration to disable the unintended ciphers.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CESA-2016_2602

CVE-2016-3099

MGASA-2016-0197

OPENSUSE-SU-2024:10311-1

RHSA-2016:2602

RHSA-2016_2602

SUSE-SU-2016:2285-1

SUSE-SU-2016:2396-1

Produtos afetados

Centos

Red Hat

Red Hat Enterprise Linux Desktop 7

Red Hat Enterprise Linux Hpc Node 7

Red Hat Enterprise Linux Server 7

Red Hat Enterprise Linux Workstation 7

Suse

Referências · 26

• https://osv.dev/vulnerability/CVE-2016-3099 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-3099 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2016-0197 · Aviso do Fabricante
• https://bugzilla.suse.com/979688 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20162396-1 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=18276 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1319052 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2016:2396-1 · Aviso do Fabricante
• https://bugzilla.suse.com/975394 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10311-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-4566 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-3099 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-3099 · Nota