PT-2017-8332 · Red Hat+2 · Red Hat Enterprise Linux Workstation 7+6

Adam Mariš · Published 2016-05-21 · Updated 2024-06-15 · CVE-2016-3099

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux Desktop 7 Red Hat Enterprise Linux HPC Node 7 Red Hat Enterprise Linux Server 7 Red Hat Enterprise Linux Workstation 7

Description The issue allows remote attackers to force the use of ciphers that were not intended to be enabled, potentially leading to security risks.

Recommendations For Red Hat Enterprise Linux Desktop 7, update the mod ns configuration to disable the unintended ciphers. For Red Hat Enterprise Linux HPC Node 7, update the mod ns configuration to disable the unintended ciphers. For Red Hat Enterprise Linux Server 7, update the mod ns configuration to disable the unintended ciphers. For Red Hat Enterprise Linux Workstation 7, update the mod ns configuration to disable the unintended ciphers.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CESA-2016_2602

CVE-2016-3099

MGASA-2016-0197

OPENSUSE-SU-2024:10311-1

RHSA-2016:2602

RHSA-2016_2602

SUSE-SU-2016:2285-1

SUSE-SU-2016:2396-1

Affected Products

Centos

Red Hat

Red Hat Enterprise Linux Desktop 7

Red Hat Enterprise Linux Hpc Node 7

Red Hat Enterprise Linux Server 7

Red Hat Enterprise Linux Workstation 7

Suse

References · 26

• https://osv.dev/vulnerability/CVE-2016-3099 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3099 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0197 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1319052 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2396-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10311-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3099 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-3099 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0197.html · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-3099 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:2285-1 · Vendor Advisory