Vulnerability Details CVE-2016-3099
mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.7%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.html
- http://rhn.redhat.com/errata/RHSA-2016-2602.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1319052
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.html
- http://rhn.redhat.com/errata/RHSA-2016-2602.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1319052
Products affected by CVE-2016-3099
-
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
-
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server:7.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0