NVD Vulnerability Detail

CVE-2016-0705

Summary	Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
Publication Date	March 4, 2016, 5:59 a.m.
Registration Date	Jan. 26, 2021, 2:04 p.m.
Last Update	Nov. 21, 2024, 11:42 a.m.

CVSS3.0 : CRITICAL
スコア	9.8
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高

CVSS2.0 : HIGH
Score	10.0
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:oracle:mysql::::::::	5.6.0	5.6.29
cpe:2.3:a:oracle:mysql::::::::	5.7.0	5.7.11

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.2e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1r:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.2c:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.1p:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1q:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1o:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl:1.0.2f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.2d:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:google:android:5.1.0:::::::*
cpe:2.3:o:google:android:4.2:::::::*
cpe:2.3:o:google:android:4.1:::::::*
cpe:2.3:o:google:android:6.0.1:::::::*
cpe:2.3:o:google:android:6.0:::::::*
cpe:2.3:o:google:android:4.0.2:::::::*
cpe:2.3:o:google:android:4.4.3:::::::*
cpe:2.3:o:google:android:4.0.4:::::::*
cpe:2.3:o:google:android:4.3:::::::*
cpe:2.3:o:google:android:4.0.1:::::::*
cpe:2.3:o:google:android:4.2.1:::::::*
cpe:2.3:o:google:android:5.0.1:::::::*
cpe:2.3:o:google:android:5.0:::::::*
cpe:2.3:o:google:android:4.0.3:::::::*
cpe:2.3:o:google:android:4.0:::::::*
cpe:2.3:o:google:android:4.4:::::::*
cpe:2.3:o:google:android:4.4.1:::::::*
cpe:2.3:o:google:android:4.2.2:::::::*
cpe:2.3:o:google:android:4.3.1:::::::*
cpe:2.3:o:google:android:4.4.2:::::::*
cpe:2.3:o:google:android:5.1:::::::*
cpe:2.3:o:google:android:4.1.2:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:15.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::

Configuration5	or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:7.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	Third Party Advisory
2	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	Third Party Advisory
3	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html	Mailing List Third Party Advisory
4	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html	Mailing List Third Party Advisory
5	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html	Mailing List Third Party Advisory
6	http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html	Mailing List Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html	Mailing List Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html	Mailing List Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html	Mailing List Third Party Advisory
10	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html	Mailing List Third Party Advisory
11	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html	Mailing List Third Party Advisory
12	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html	Mailing List Third Party Advisory
13	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html	Mailing List Third Party Advisory
14	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html	Mailing List Third Party Advisory
15	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html	Mailing List Third Party Advisory
16	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html	Mailing List Third Party Advisory
17	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html	Mailing List Third Party Advisory
18	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html	Mailing List Third Party Advisory
19	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html	Mailing List Third Party Advisory
20	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html	Mailing List Third Party Advisory
21	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html	Mailing List Third Party Advisory
22	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html	Mailing List Third Party Advisory
23	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html	Mailing List Third Party Advisory
24	http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html	Mailing List Third Party Advisory
25	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html	Mailing List Third Party Advisory
26	http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html	Mailing List Third Party Advisory
27	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html	Mailing List Third Party Advisory
28	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.html	Mailing List Third Party Advisory
29	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html	Mailing List Third Party Advisory
30	http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html	Mailing List Third Party Advisory
31	http://marc.info/?l=bugtraq&m=145889460330120&w=2	Mailing List Third Party Advisory
32	http://marc.info/?l=bugtraq&m=145889460330120&w=2	Mailing List Third Party Advisory
33	http://marc.info/?l=bugtraq&m=145983526810210&w=2	Mailing List Third Party Advisory
34	http://marc.info/?l=bugtraq&m=145983526810210&w=2	Mailing List Third Party Advisory
35	http://marc.info/?l=bugtraq&m=146108058503441&w=2	Mailing List Third Party Advisory
36	http://marc.info/?l=bugtraq&m=146108058503441&w=2	Mailing List Third Party Advisory
37	http://openssl.org/news/secadv/20160301.txt	Vendor Advisory
38	http://openssl.org/news/secadv/20160301.txt	Vendor Advisory
39	http://rhn.redhat.com/errata/RHSA-2016-2957.html	Third Party Advisory
40	http://rhn.redhat.com/errata/RHSA-2016-2957.html	Third Party Advisory
41	http://source.android.com/security/bulletin/2016-05-01.html	Third Party Advisory
42	http://source.android.com/security/bulletin/2016-05-01.html	Third Party Advisory
43	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl	Third Party Advisory
44	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl	Third Party Advisory
45	http://www.debian.org/security/2016/dsa-3500	Third Party Advisory
46	http://www.debian.org/security/2016/dsa-3500	Third Party Advisory
47	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Vendor Advisory
48	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	Patch Vendor Advisory
49	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Vendor Advisory
50	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html	Patch Vendor Advisory
51	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	Vendor Advisory
52	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	Vendor Advisory
53	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Vendor Advisory
54	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	Vendor Advisory
55	http://www.securityfocus.com/bid/83754	Third Party Advisory VDB Entry
56	http://www.securityfocus.com/bid/83754	Third Party Advisory VDB Entry
57	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
58	http://www.securityfocus.com/bid/91787	Third Party Advisory VDB Entry
59	http://www.securitytracker.com/id/1035133	Third Party Advisory VDB Entry
60	http://www.securitytracker.com/id/1035133	Third Party Advisory VDB Entry
61	http://www.ubuntu.com/usn/USN-2914-1	Third Party Advisory
62	http://www.ubuntu.com/usn/USN-2914-1	Third Party Advisory
63	https://access.redhat.com/errata/RHSA-2018:2568	Third Party Advisory
64	https://access.redhat.com/errata/RHSA-2018:2568	Third Party Advisory
65	https://access.redhat.com/errata/RHSA-2018:2575	Third Party Advisory
66	https://access.redhat.com/errata/RHSA-2018:2575	Third Party Advisory
67	https://access.redhat.com/errata/RHSA-2018:2713	Third Party Advisory
68	https://access.redhat.com/errata/RHSA-2018:2713	Third Party Advisory
69	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
70	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
71	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88
72	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88
73	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us	Third Party Advisory
74	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us	Third Party Advisory
75	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990	Third Party Advisory
76	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990	Third Party Advisory
77	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681	Third Party Advisory
78	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681	Third Party Advisory
79	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877	Third Party Advisory
80	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877	Third Party Advisory
81	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017	Third Party Advisory
82	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017	Third Party Advisory
83	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404	Third Party Advisory
84	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404	Third Party Advisory
85	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085	Third Party Advisory
86	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085	Third Party Advisory
87	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617	Third Party Advisory
88	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617	Third Party Advisory
89	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441	Third Party Advisory
90	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441	Third Party Advisory
91	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736	Third Party Advisory
92	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736	Third Party Advisory
93	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800	Third Party Advisory
94	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800	Third Party Advisory
95	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888	Third Party Advisory
96	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888	Third Party Advisory
97	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380	Third Party Advisory
98	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380	Third Party Advisory
99	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716	Third Party Advisory
100	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716	Third Party Advisory
101	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946	Third Party Advisory
102	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946	Third Party Advisory
103	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917	Third Party Advisory
104	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917	Third Party Advisory
105	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	Third Party Advisory
106	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	Third Party Advisory
107	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168	Third Party Advisory
108	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168	Third Party Advisory
109	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc	Vendor Advisory
110	https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc	Vendor Advisory
111	https://security.gentoo.org/glsa/201603-15	Third Party Advisory
112	https://security.gentoo.org/glsa/201603-15	Third Party Advisory
113	https://www.openssl.org/news/secadv/20160301.txt	Vendor Advisory
114	https://www.openssl.org/news/secadv/20160301.txt	Vendor Advisory

Common Vulnerabilities List

JVN Vulnerability Information

OpenSSL の crypto/dsa/dsa_ameth.c の dsa_priv_decode 関数におけるメモリ二重解放の脆弱性

Title	OpenSSL の crypto/dsa/dsa_ameth.c の dsa_priv_decode 関数におけるメモリ二重解放の脆弱性
Summary	OpenSSL の crypto/dsa/dsa_ameth.c の dsa_priv_decode 関数には、メモリ二重解放の脆弱性が存在します。補足情報 : CWE による脆弱性タイプは、CWE-415: Double Free (二重解放) と識別されています。 http://cwe.mitre.org/data/definitions/415.html
Possible impacts	第三者により、不正な形式の DSA 秘密鍵を介して、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 1, 2016, midnight
Registration Date	March 8, 2016, 4:26 p.m.
Last Update	Nov. 21, 2016, 3:32 p.m.

Affected System

オラクル

MySQL 5.6.29 およびそれ以前

MySQL 5.7.11 およびそれ以前

OpenSSL Project

OpenSSL 1.0.1s 未満の 1.0.1

OpenSSL 1.0.2g 未満の 1.0.2

Google

Android

ヒューレット・パッカード・エンタープライズ

HPE Insight Controlサーバー配備すべてのバージョン

HPE Oneview for VMware vCenter 7.8.1 以前のリリース

HPE Systems Insight Manager (HP SIM) 7.5.1 より前のバージョン

IceWall Federation Agent 3.0 (RHEL 5/6/7)

IceWall MCRP 3.0 (RHEL 5/6/7 または HP-UX 11i v3)

IceWall SSO Agent Option 10.0 (RHEL 5/6/7 または HP-UX 11i v3)

IceWall SSO certd 10.0 (RHEL 5/6/7 または HP-UX 11i v3)

IceWall SSO Dfw 10.0 (RHEL 5/6/7 または HP-UX 11i v3)

System Management Homepage 7.5.5 より前のすべてのバージョン

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-0705	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705
National Vulnerability Database (NVD)
2	CVE-2016-0705	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-0705

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Android Open Source Project
1	Nexus Security Bulletin - May 2016	http://source.android.com/security/bulletin/2016-05-01.html
HPE Security Bulletin
2	HPSBGN03553	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05176716
3	HPSBGN03563	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05052990
4	HPSBGN03569	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681
5	HPSBGN03587	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05141441
6	HPSBHF03592	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404
7	HPSBHF03594	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05135617
8	HPSBMU03575	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05086877
9	HPSBMU03590	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085
10	HPSBMU03593	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
11	HPSBMU03600	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05150736
12	HPSBMU03601	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800
13	HPSBMU03611	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05150888
14	HPSBMU03612	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05158380
15	HPSBST03642	https://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05301946
McAfee Security Bulletin
16	SB10156	https://kc.mcafee.com/corporate/index?page=content&id=SB10156
OpenSSL
17	OpenSSL 1.0.1 Series Release Notes	https://www.openssl.org/news/openssl-1.0.1-notes.html
18	OpenSSL 1.0.2 Series Release Notes	https://www.openssl.org/news/openssl-1.0.2-notes.html
OpenSSL Project
19	Fix double free in DSA private key parsing.	https://git.openssl.org/?p=openssl.git;a=commit;h=6c88c71b4e4825c7bc0489306d062d017634eb88
OpenSSL Security Advisory
20	Double-free in DSA code (CVE-2016-0705)	https://openssl.org/news/secadv/20160301.txt
Oracle Critical Patch Update
21	Oracle Critical Patch Update Advisory - April 2016	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
22	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
23	Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016	http://www.oracle.com/technetwork/topics/security/cpuapr2016-2881694.html
24	Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices	http://www.oracle.com/technetwork/topics/security/cpuapr2016verbose-2881709.html
Oracle Technology Network
25	Oracle Linux Bulletin - January 2016	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
26	Oracle Solaris Third Party Bulletin - April 2016	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
Security Advisories
27	SA40168	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168
SECURITY BLOG
28	April 2016 Critical Patch Update Released	https://blogs.oracle.com/security/entry/april_2016_critical_patch_update

Change Log

No	Changed Details	Date of change
0	[2016年03月08日] 掲載 [2016年05月23日] ベンダ情報：オラクル (Oracle Critical Patch Update CVSS V2 Risk Matrices - April 2016) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - April 2016) を追加ベンダ情報：オラクル (Text Form of Oracle Critical Patch Update - April 2016 Risk Matrices) を追加ベンダ情報：オラクル (April 2016 Critical Patch Update Released) を追加 [2016年05月31日] CVSS による深刻度：内容を更新影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：パルスセキュア (SA40168) を追加ベンダ情報：Google (Nexus Security Bulletin - May 2016) を追加 [2016年06月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03601) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03590) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03593) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03569) を追加 [2016年08月26日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：マカフィー (SB10156) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03563) を追加 [2016年10月26日] ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03575) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBHF03592) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03587) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03600) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBHF03594) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03612) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03611) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03553) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBST03642) を追加 [2016年11月21日] ベンダ情報：オラクル (Oracle Linux Bulletin - January 2016) を追加ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - April 2016) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加	Feb. 17, 2018, 10:37 a.m.

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.2e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1r:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.2c:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.1p:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1q:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1o:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl:1.0.2f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.2d:::::::*

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:google:android:5.1.0:::::::*
cpe:2.3:o:google:android:4.2:::::::*
cpe:2.3:o:google:android:4.1:::::::*
cpe:2.3:o:google:android:6.0.1:::::::*
cpe:2.3:o:google:android:6.0:::::::*
cpe:2.3:o:google:android:4.0.2:::::::*
cpe:2.3:o:google:android:4.4.3:::::::*
cpe:2.3:o:google:android:4.0.4:::::::*
cpe:2.3:o:google:android:4.3:::::::*
cpe:2.3:o:google:android:4.0.1:::::::*
cpe:2.3:o:google:android:4.2.1:::::::*
cpe:2.3:o:google:android:5.0.1:::::::*
cpe:2.3:o:google:android:5.0:::::::*
cpe:2.3:o:google:android:4.0.3:::::::*
cpe:2.3:o:google:android:4.0:::::::*
cpe:2.3:o:google:android:4.4:::::::*
cpe:2.3:o:google:android:4.4.1:::::::*
cpe:2.3:o:google:android:4.2.2:::::::*
cpe:2.3:o:google:android:4.3.1:::::::*
cpe:2.3:o:google:android:4.4.2:::::::*
cpe:2.3:o:google:android:5.1:::::::*
cpe:2.3:o:google:android:4.1.2:::::::*