CVE-2016-0800 json
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify m…
published 2016-03-01 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-0811
- cvss
- 5.9
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 82.1%
- EPSS 82.1% chance of exploitation in 30 days, percentile 99.6%
- public exploits
- 1
- Metasploit
Summary
The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
Patch / fix
- nss Debian 14, Debian 13, Debian 12 3.13
- openssl Debian 14, Debian 13, Debian 12 1.0.0c-2
debian advisories DEBIAN-CVE-2016-0800
- openssl098e RHEL 6 0.9.8e-20.el6_7.1
- openssl098e RHEL 7 0.9.8e-29.el7_2.3
- openssl RHEL 5 0.9.8e-39.el5_11
- openssl-perl RHEL 5 0.9.8e-39.el5_11
- rhev-hypervisor7 RHEL 6 7.2-20160302.1.el6ev
- rhev-hypervisor7 RHEL 7 7.2-20160302.1.el7ev
- openssl RHEL 6 1.0.1e-42.el6_7.4
- openssl RHEL 7 1:1.0.1e-51.el7_2.4
red hat advisories RHSA-2016:0372RHSA-2016:0306RHSA-2016:0304RHSA-2016:0303RHSA-2016:0305RHSA-2016:0302
- openssl OpenStack Cloud 5, Manager Proxy 2.1, Manager 2.1 0.9.8j-0.91.1
- compat-openssl098 SLES for SAP 12 SP1, SLED 12 SP1, SLED 12 +1 more 0.9.8j-94.1
- compat-openssl097g SLES for SAP 11 SP4, SLED 11 SP4 0.9.7g-146.22.41.1
- openssl Studio Onsite 1.3, SLES for SAP 11 SP4, SLES 11 SP4 +5 more 0.9.8j-0.89.1
- openssl SLES for SAP 12 SP1, SLES 12 SP1, SLED 12 SP1 +1 more 1.0.1i-44.1
- openssl SLES for SAP 12, SLES 12, SLED 12 +1 more 1.0.1i-27.13.1
- openssl1 SLES 11-SECURITY 1.0.1g-0.40.1
suse advisories SUSE-SU-2016:1057-1SUSE-SU-2016:0641-1SUSE-SU-2016:0631-1SUSE-SU-2016:0624-1SUSE-SU-2016:0620-1SUSE-SU-2016:0617-1
- openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2
opensuse advisories openSUSE-SU-2024:11127-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2016-0800 updated cvss 5.8
SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)
-
Red Hat Enterprise Linux 5 openssl097aaffected: no fix planned “Will not fix”
-
Red Hat Enterprise Linux 6 guest-images Red Hat Enterprise Linux 7 rhel-guest-image Red Hat JBoss Enterprise Web Server 2 openssl Red Hat JBoss Enterprise Web Server 3 opensslaffected: no fix available
-
Red Hat JBoss Operations Network 3 CoreServer CoreServeraffected: no fix planned “Will not fix”
-
Red Hat Enterprise Linux (v. 5 server) openssl 0.9.8e-39.el5_11, openssl-perl 0.9.8e-39.el5_11fixed: vendor fix RHSA-2016:0302
-
Red Hat Enterprise Linux AS (v. 4 ELS) openssl 0.9.7a-43.23.el4, openssl-perl 0.9.7a-43.23.el4fixed: vendor fix RHSA-2016:0306
-
Red Hat Enterprise Linux Client (v. 7) openssl 1.0.1e-51.el7_2.4, openssl098e 0.9.8e-29.el7_2.3, openssl-libs 1.0.1e-51.el7_2.4 Red Hat Enterprise Linux Client Optional (v. 7) openssl-perl 1.0.1e-51.el7_2.4 Red Hat Enterprise Linux ComputeNode (v. 7) openssl 1.0.1e-51.el7_2.4, openssl098e 0.9.8e-29.el7_2.3, openssl-libs 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) openssl 1.0.1e-42.el7_1.10, openssl-libs 1.0.1e-42.el7_1.10fixed: vendor fix RHSA-2016:0305
-
Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-perl 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
show 17 moreshow fewer
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) openssl-perl 1.0.1e-42.el7_1.10fixed: vendor fix RHSA-2016:0305
-
Red Hat Enterprise Linux Desktop (v. 5 client) openssl 0.9.8e-39.el5_11, openssl-perl 0.9.8e-39.el5_11fixed: vendor fix RHSA-2016:0302
-
Red Hat Enterprise Linux Desktop (v. 6) openssl 1.0.1e-42.el6_7.4, openssl098e 0.9.8e-20.el6_7.1 Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-perl 1.0.1e-42.el6_7.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl 0.9.8e-39.el5_11fixed: vendor fix RHSA-2016:0302
-
Red Hat Enterprise Linux ES (v. 4 ELS) openssl 0.9.7a-43.23.el4, openssl-perl 0.9.7a-43.23.el4fixed: vendor fix RHSA-2016:0306
-
Red Hat Enterprise Linux HPC Node (v. 6) openssl 1.0.1e-42.el6_7.4, openssl098e 0.9.8e-20.el6_7.1fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux HPC Node EUS (v. 6.6) openssl 1.0.1e-30.el6_6.12fixed: vendor fix RHSA-2016:0305
-
Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-perl 1.0.1e-42.el6_7.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) openssl-perl 1.0.1e-30.el6_6.12fixed: vendor fix RHSA-2016:0305
-
Red Hat Enterprise Linux Long Life (v. 5.6 server) openssl 0.9.8e-12.el5_6.13, openssl-perl 0.9.8e-12.el5_6.13 Red Hat Enterprise Linux Long Life (v. 5.9 server) openssl 0.9.8e-26.el5_9.5, openssl-perl 0.9.8e-26.el5_9.5fixed: vendor fix RHSA-2016:0304
-
Red Hat Enterprise Linux Server (v. 6) openssl 1.0.1e-42.el6_7.4, openssl098e 0.9.8e-20.el6_7.1 Red Hat Enterprise Linux Server (v. 7) openssl 1.0.1e-51.el7_2.4, openssl098e 0.9.8e-29.el7_2.3, openssl-libs 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux Server AUS (v. 6.2) openssl 1.0.0-20.el6_2.8 Red Hat Enterprise Linux Server AUS (v. 6.4) openssl 1.0.0-27.el6_4.5 Red Hat Enterprise Linux Server AUS (v. 6.5) openssl 1.0.1e-16.el6_5.16fixed: vendor fix RHSA-2016:0303
-
Red Hat Enterprise Linux Server EUS (v. 6.6) openssl 1.0.1e-30.el6_6.12 Red Hat Enterprise Linux Server EUS (v. 7.1) openssl 1.0.1e-42.el7_1.10, openssl 1.0.1e-42.ael7b_1.10, openssl-libs 1.0.1e-42.el7_1.10, openssl-libs 1.0.1e-42.ael7b_1.10fixed: vendor fix RHSA-2016:0305
-
Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl 1.0.1e-42.el6_7.4 Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux Server Optional AUS (v. 6.2) openssl 1.0.0-20.el6_2.8, openssl-perl 1.0.0-20.el6_2.8 Red Hat Enterprise Linux Server Optional AUS (v. 6.4) openssl 1.0.0-27.el6_4.5, openssl-perl 1.0.0-27.el6_4.5 Red Hat Enterprise Linux Server Optional AUS (v. 6.5) openssl 1.0.1e-16.el6_5.16, openssl-perl 1.0.1e-16.el6_5.16fixed: vendor fix RHSA-2016:0303
-
Red Hat Enterprise Linux Server Optional EUS (v. 6.6) openssl-perl 1.0.1e-30.el6_6.12 Red Hat Enterprise Linux Server Optional EUS (v. 7.1) openssl-perl 1.0.1e-42.el7_1.10, openssl-perl 1.0.1e-42.ael7b_1.10fixed: vendor fix RHSA-2016:0305
-
Red Hat Enterprise Linux Workstation (v. 6) openssl 1.0.1e-42.el6_7.4, openssl098e 0.9.8e-20.el6_7.1fixed: vendor fix RHSA-2016:0301
9 more fixed, 4 more not affected in the full advisory
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-16-103-03C updated cvss 4.0
Siemens Industrial Products DROWN Vulnerability (Update C)
-
Siemens ROX I Siemens SCALANCE X200 family <V5.2.2 Siemens SCALANCE X200 IRT family <V5.3.0 Siemens SCALANCE X200 RNA family <V3.2.5 Siemens SCALANCE X300 family <V4.1.0 Siemens SCALANCE X414 <V3.10.2affected: mitigation “Siemens has released updates and encourages users to apply them as soon as possible. The following is a list of the products with their corresponding updates.” support.industry.siemens.com
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
cisa ICSA-22-349-21 updated cvss 4.0
Siemens SCALANCE X-200RNA Switch Devices
-
Siemens SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2) <V3.2.7 Siemens SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2) <V3.2.7 Siemens SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3) <V3.2.7 Siemens SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3) <V3.2.7 Siemens SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3) <V3.2.7affected: fixed in V3.2.7, mitigation support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
Timeline
- First public exploit (Metasploit auxiliary/scanner/ssl/ssl_version)
- Published
Exploit prediction
82.11% chance of exploitation in the next 30 days, higher than 99.6% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit auxiliary/scanner/ssl/ssl_version SSL/TLS Version Detection metasploit auxiliary, normal rank, 2014-10-14
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 5.9 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- Technology feeds
References
-
marc.info
/?l=bugtraq&m=146133665209436&w=2
vendor-advisory
-
marc.info
/?l=bugtraq&m=146108058503441&w=2
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00010.html
vendor-advisory
-
security.freebsd.org
/advisories/FreeBSD-SA-16:12.openssl.asc
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-05/msg00015.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00003.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00011.html
vendor-advisory
-
marc.info
/?l=bugtraq&m=145983526810210&w=2
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00038.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-05/msg00017.html
vendor-advisory
-
tools.cisco.com
/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00025.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00004.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-1519.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00007.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00001.html
vendor-advisory
-
security.gentoo.org
/glsa/201603-15
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00006.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00017.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00002.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00009.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00005.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00012.html
vendor-advisory
- kc.mcafee.com /corporate/index?page=content&id=SB10154
- oracle.com /technetwork/topics/security/ovmbulletinjul2016-3090546.html
- access.redhat.com /security/vulnerabilities/drown
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589
- oracle.com /technetwork/security-advisory/cpujan2018-3236628.html
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
- h20566.www2.hpe.com /hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765
- oracle.com /technetwork/security-advisory/cpujul2016-2881720.html
- huawei.com /en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en
- oracle.com /technetwork/topics/security/linuxbulletinjan2016-2867209.html
- security.netapp.com /advisory/ntap-20160301-0001/
- ics-cert.us-cert.gov /advisories/ICSA-16-103-03
- oracle.com /technetwork/topics/security/bulletinapr2016-2952098.html
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953
- kb.pulsesecure.net /articles/Pulse_Security_Advisories/SA40168
-
kb.cert.org
/vuls/id/583776
third-party-advisory
- kb.juniper.net /InfoCenter/index?page=content&id=JSA10722
- kb.juniper.net /InfoCenter/index?page=content&id=JSA10759
- support.citrix.com /article/CTX208403
- oracle.com /technetwork/security-advisory/cpuapr2016v3-2985753.html
- oracle.com /technetwork/topics/security/bulletinjan2016-2867206.html
- securityfocus.com /bid/83733
- securityfocus.com /bid/91787
- securitytracker.com /id/1035133
- siemens.com /cert/pool/cert/siemens_security_advisory_ssa-623229.pdf
- cert-portal.siemens.com /productcert/pdf/ssa-412672.pdf
- cert-portal.siemens.com /productcert/pdf/ssa-623229.pdf
- drownattack.com
Sources
- CVE List CVE-2016-0800
- NVD CVE-2016-0800
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.