EDB-39768
functionalOpenSSL - Padding Oracle in AES-NI CBC MAC Check
view exploit source exploit_dbverifiedtype dosauthor Juraj Somorovskypublished 2016-05-04catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-2107US | medium5.9 | Exploit | ||
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obta… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan