FiloSottile/CVE-2016-2107

PoC

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

view exploit source poc_in_githubauthor FiloSottilepublished 2016-05-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-2107US	medium5.9	89.1% (100th)	Exploit	2016-05-05
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obta…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.