CVE-2016-1777
First published: Thu Mar 24 2016(Updated: )
Security. Description: This issue was addressed by removing RC4.
Credit: Pepi Zawodsky Pepi Zawodsky Pepi Zawodsky Pepi Zawodsky product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Mac OS X Server | <=5.0.15 | |
| Apple tvOS | <12 | 12 |
| Apple macOS Mojave | <10.14 | 10.14 |
| Apple watchOS | <5 | 5 |
| Apple iOS | <12 | 12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT209106 (Advisory)
- https://support.apple.com/en-us/HT209107 (Advisory)
- https://support.apple.com/en-us/HT209108 (Advisory)
- https://support.apple.com/en-us/HT209139 (Advisory)
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html
- http://www.securityfocus.com/bid/85054
- http://www.securitytracker.com/id/1035342
- https://support.apple.com/HT206173
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2018-4322
- CVE-2018-4321
- CVE-2018-5383
- CVE-2018-4126
- CVE-2018-4412
- CVE-2018-4414
- CVE-2018-4356
- CVE-2018-4347
- CVE-2018-4333
- CVE-2018-4433
- CVE-2018-4426
- CVE-2018-4331
- CVE-2018-4332
- CVE-2018-4343
- CVE-2018-4355
- CVE-2018-4408
- CVE-2018-4341
- CVE-2018-4354
- CVE-2018-4383
- CVE-2018-4335
- CVE-2018-4401
- CVE-2018-4305
- CVE-2018-4363
- CVE-2018-4336
- CVE-2018-4337
- CVE-2018-4340
- CVE-2018-4344
- CVE-2018-4425
- CVE-2018-4399
- CVE-2018-4407
- CVE-2018-4326
- CVE-2018-4310
- CVE-2018-4313
- CVE-2018-4352
- CVE-2018-4329
- CVE-2018-4307
- CVE-2018-4362
- CVE-2018-4395
- CVE-2016-1777
- CVE-2018-4325
- CVE-2018-4203
- CVE-2018-4304
- CVE-2018-4309
- CVE-2018-4361
- CVE-2018-4474
- CVE-2018-4311
- CVE-2018-4299
- CVE-2018-4323
- CVE-2018-4328
- CVE-2018-4358
- CVE-2018-4359
- CVE-2018-4360
- CVE-2018-4319
- CVE-2018-4316
- CVE-2018-4191
- CVE-2018-4345
- CVE-2018-4315
- CVE-2018-4197
- CVE-2018-4312
- CVE-2018-4306
- CVE-2018-4318
- CVE-2018-4317
- CVE-2018-4314
- CVE-2018-4295
- CVE-2018-4324
- CVE-2018-4417
- CVE-2018-4353
- CVE-2017-12613
- CVE-2017-12618
- CVE-2018-4411
- CVE-2018-4308
- CVE-2018-4153
- CVE-2018-4406
- CVE-2018-4346
- CVE-2018-4296
- CVE-2019-8643
- CVE-2017-5731
- CVE-2017-5732
- CVE-2017-5733
- CVE-2017-5734
- CVE-2017-5735
- CVE-2018-3646
- CVE-2018-4396
- CVE-2018-4418
- CVE-2018-4351
- CVE-2018-4350
- CVE-2018-4334
- CVE-2018-4451
- CVE-2018-4456
- CVE-2015-3194
- CVE-2015-5333
- CVE-2015-5334
- CVE-2016-0702
- CVE-2018-4348
- CVE-2018-3639
- CVE-2018-4393
- CVE-2018-4338
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2016-1777.
What is the severity rating of CVE-2016-1777?
CVE-2016-1777 has a severity rating of 7.5 (high).
Which products are affected by CVE-2016-1777?
The affected products include Apple tvOS up to version 12, Apple iOS up to version 12, Apple macOS Mojave up to version 10.14, Apple Mac OS X Server up to version 5.0.15, and Apple watchOS up to version 5.
How does CVE-2016-1777 impact web servers?
CVE-2016-1777 allows remote attackers to defeat cryptographic protection mechanisms on web servers that use RC4 algorithm.
How can I mitigate the vulnerability in my Apple products?
To mitigate CVE-2016-1777, update your Apple products to the recommended versions mentioned in the Apple support documentation.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/apple
- canonical/apple ios
- canonical/apple tvos
- canonical/apple watchos
- canonical/apple macos mojave
- canonical/apple mac os x server
- version/apple mac os x server/5.0.15