CVE-2016-3099: High severity red hat enterprise linux desktop vulnerability
It was reported that +CIPHER operator in OpenSSL changes the order of a cipher. Since cipher ordering isn't supported in NSS, the modnss code was supposed to return an error. Instead it returned the result of processing up to that point. Default OpenSSL cipher string:
!SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES
Would not properly exclude anything because only the first 5 elements would be examined.
Other sources
modns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3099?
CVE-2016-3099 has been classified with a moderate severity level.
How do I fix CVE-2016-3099?
To mitigate CVE-2016-3099, users should update their OpenSSL packages to the latest version provided by their distribution.
Which systems are affected by CVE-2016-3099?
CVE-2016-3099 affects Red Hat Enterprise Linux Desktop, HPC Node, Server, and Workstation, all at version 7.0.
What exploit is associated with CVE-2016-3099?
CVE-2016-3099 allows for a situation where the processing of ciphers may continue incorrectly due to a flaw in mod_nss.
Is CVE-2016-3099 still a concern in newer releases?
CVE-2016-3099 is primarily a concern for Red Hat Enterprise Linux 7.0 users, and later releases may not be affected if they have applied necessary patches.