PT-2017-7835 · Symantec · Symantec Ssl Visibility

Published 2017-04-11 · Updated 2018-02-24 · CVE-2016-10259

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Symantec SSL Visibility (SSLV) versions 3.8.4FC through 3.10 before 3.10.4.1 Symantec SSL Visibility (SSLV) versions 3.11 before 3.11.3.1

Description The issue allows a malicious SSL client to temporarily exhaust the TCP connection pool of an SSL server under certain circumstances, impacting the SSL servers for intercepted SSL connections.

Recommendations For Symantec SSL Visibility (SSLV) versions 3.8.4FC through 3.10 before 3.10.4.1, update to version 3.10.4.1 or later. For Symantec SSL Visibility (SSLV) versions 3.11 before 3.11.3.1, update to version 3.11.3.1 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-10259

Affected Products

Symantec Ssl Visibility

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-10259 · Security Note
• https://bto.bluecoat.com/security-advisory/sa142 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10259 · Vendor Advisory
• http://securityfocus.com/bid/97525 · Note
• https://symantec.com/security-center/network-protection-security-advisories/SA142 · Note