NVD Vulnerability Detail

CVE-2016-2108

Summary	The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue.
Publication Date	May 5, 2016, 10:59 a.m.
Registration Date	Jan. 26, 2021, 2:08 p.m.
Last Update	Nov. 21, 2024, 11:47 a.m.

CVSS3.0 : CRITICAL
スコア	9.8
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高

CVSS2.0 : HIGH
Score	10.0
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl::::::::		1.0.1n
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:google:android:5.1.0:::::::*
cpe:2.3:o:google:android:4.2:::::::*
cpe:2.3:o:google:android:4.1:::::::*
cpe:2.3:o:google:android:6.0.1:::::::*
cpe:2.3:o:google:android:6.0:::::::*
cpe:2.3:o:google:android:4.0.2:::::::*
cpe:2.3:o:google:android:4.4.3:::::::*
cpe:2.3:o:google:android:4.0.4:::::::*
cpe:2.3:o:google:android:4.3:::::::*
cpe:2.3:o:google:android:4.0.1:::::::*
cpe:2.3:o:google:android:4.2.1:::::::*
cpe:2.3:o:google:android:5.0.1:::::::*
cpe:2.3:o:google:android:5.0:::::::*
cpe:2.3:o:google:android:4.0.3:::::::*
cpe:2.3:o:google:android:4.0:::::::*
cpe:2.3:o:google:android:4.4:::::::*
cpe:2.3:o:google:android:4.4.1:::::::*
cpe:2.3:o:google:android:4.2.2:::::::*
cpe:2.3:o:google:android:4.3.1:::::::*
cpe:2.3:o:google:android:4.4.2:::::::*
cpe:2.3:o:google:android:5.1:::::::*
cpe:2.3:o:google:android:4.1.2:::::::*

Related information, measures and tools

No	URL	タグ
1	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
2	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
3	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
4	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
5	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html
6	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html
7	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html
8	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html
9	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html
10	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html
11	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html
12	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html
13	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html
14	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html
15	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html
16	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html
17	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html
18	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html
19	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html
20	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html
21	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html
22	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html
23	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html
24	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html
25	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html
26	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html
27	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html
28	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html
29	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html
30	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html
31	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html
32	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html
33	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html
34	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html
35	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html
36	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html
37	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html
38	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html
39	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html
40	http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html
41	http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html
42	http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html
43	http://rhn.redhat.com/errata/RHSA-2016-0722.html
44	http://rhn.redhat.com/errata/RHSA-2016-0722.html
45	http://rhn.redhat.com/errata/RHSA-2016-0996.html
46	http://rhn.redhat.com/errata/RHSA-2016-0996.html
47	http://rhn.redhat.com/errata/RHSA-2016-2056.html
48	http://rhn.redhat.com/errata/RHSA-2016-2056.html
49	http://rhn.redhat.com/errata/RHSA-2016-2073.html
50	http://rhn.redhat.com/errata/RHSA-2016-2073.html
51	http://rhn.redhat.com/errata/RHSA-2016-2957.html
52	http://rhn.redhat.com/errata/RHSA-2016-2957.html
53	http://source.android.com/security/bulletin/2016-07-01.html
54	http://source.android.com/security/bulletin/2016-07-01.html
55	http://support.citrix.com/article/CTX212736
56	http://support.citrix.com/article/CTX212736
57	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl
58	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl
59	http://www.debian.org/security/2016/dsa-3566
60	http://www.debian.org/security/2016/dsa-3566
61	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
62	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
63	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
64	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
65	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
66	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
67	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
68	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
69	http://www.securityfocus.com/bid/89752
70	http://www.securityfocus.com/bid/89752
71	http://www.securityfocus.com/bid/91787
72	http://www.securityfocus.com/bid/91787
73	http://www.securitytracker.com/id/1035721
74	http://www.securitytracker.com/id/1035721
75	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103
76	http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103
77	http://www.ubuntu.com/usn/USN-2959-1
78	http://www.ubuntu.com/usn/USN-2959-1
79	https://access.redhat.com/errata/RHSA-2016:1137
80	https://access.redhat.com/errata/RHSA-2016:1137
81	https://access.redhat.com/errata/RHSA-2017:0193
82	https://access.redhat.com/errata/RHSA-2017:0193
83	https://access.redhat.com/errata/RHSA-2017:0194
84	https://access.redhat.com/errata/RHSA-2017:0194
85	https://bto.bluecoat.com/security-advisory/sa123
86	https://bto.bluecoat.com/security-advisory/sa123
87	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
88	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
89	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3661bb4e7934668bd99ca777ea8b30eedfafa871
90	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3661bb4e7934668bd99ca777ea8b30eedfafa871
91	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5da52e308a6aeea6d5f3df98c4da295d7e9cc27
92	https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=f5da52e308a6aeea6d5f3df98c4da295d7e9cc27
93	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us
94	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us
95	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us
96	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us
97	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us
98	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us
99	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149345
100	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05149345
101	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862
102	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164862
103	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804
104	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804
105	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202
106	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202
107	https://security.gentoo.org/glsa/201612-16
108	https://security.gentoo.org/glsa/201612-16
109	https://security.netapp.com/advisory/ntap-20160504-0001/
110	https://security.netapp.com/advisory/ntap-20160504-0001/
111	https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00067&languageid=en-fr
112	https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00067&languageid=en-fr
113	https://support.apple.com/HT206903
114	https://support.apple.com/HT206903
115	https://www.openssl.org/news/secadv/20160503.txt	Vendor Advisory
116	https://www.openssl.org/news/secadv/20160503.txt	Vendor Advisory
117	https://www.tenable.com/security/tns-2016-18
118	https://www.tenable.com/security/tns-2016-18

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

OpenSSL の ASN.1 の実装における任意のコードを実行される脆弱性

Title	OpenSSL の ASN.1 の実装における任意のコードを実行される脆弱性
Summary	OpenSSL の ASN.1 の実装には、任意のコードを実行される、またはサービス運用妨害 (バッファアンダーフローおよびメモリ破損) 状態にされる脆弱性が存在します。本脆弱性は、"negative zero" の問題と呼ばれています。
Possible impacts	第三者により、巧妙に細工されたシリアル化されたデータの ANY フィールドを介して、任意のコードを実行される、またはサービス運用妨害 (バッファアンダーフローおよびメモリ破損) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 3, 2016, midnight
Registration Date	May 10, 2016, 6:16 p.m.
Last Update	Oct. 3, 2017, 1:37 p.m.

Affected System

レッドハット

Red Hat Enterprise Linux Desktop (v. 6)

Red Hat Enterprise Linux Desktop (v. 7)

Red Hat Enterprise Linux HPC Node (v. 6)

Red Hat Enterprise Linux HPC Node (v. 7)

Red Hat Enterprise Linux HPC Node EUS (v. 7.2)

Red Hat Enterprise Linux Server (v. 6)

Red Hat Enterprise Linux Server (v. 7)

Red Hat Enterprise Linux Server AUS (v. 7.2)

Red Hat Enterprise Linux Server EUS (v. 7.2)

Red Hat Enterprise Linux Workstation (v. 6)

Red Hat Enterprise Linux Workstation (v. 7)

OpenSSL Project

OpenSSL 1.0.1o 未満の 1.0.1

OpenSSL 1.0.2c 未満の 1.0.2

アップル

Apple Mac OS X 10.11 およびそれ以降

日本電気

CapsSuite V3.0 から V4.0

EnterpriseDirectoryServer Ver6.1 から V8.0

EnterpriseIdentityManager Ver2.0 以降

ESMPRO/ServerAgent 4.4.22-1以降 (Linux)

ESMPRO/ServerAgentService 全バージョン (Linux)

Express5800 /SG シリーズ InterSecVM/SG v1.2、v3.0、v3.1、v4.0

Express5800 /SG シリーズ SG3600LM/LG/LJ v6.1、v6.2、v7.0、v7.1、v8.0、v8.2

Express5800 /SG シリーズ UNIVERGE SG3000LG/LJ

IP38X/1200

IP38X/1210

IP38X/3000

IP38X/3500

IP38X/5000

IP38X/810

IP38X/FW120

IP38X/N500

IP38X/SR100

SecureWare/PKIアプリケーション開発キット Ver3.2

UNIVERGE Business ConneCT V7.1.1

WebOTX Application Server Enterprise V8.2 から V9.4

WebOTX Application Server Express V8.2 から V9.4

WebOTX Application Server Foundation V8.2 から V8.5

WebOTX Application Server Standard V8.2 から V9.4

WebOTX Enterprise Service Bus V8.2 から V9.3

WebSAM NetvisorPro 6.1、6.2、7.0

日立

Cosminexus Application Server Enterprise Version 6

Cosminexus Application Server Standard Version 6

Cosminexus Application Server Version 5

Cosminexus Developer Light Version 6

Cosminexus Developer Professional Version 6

Cosminexus Developer Standard Version 6

Cosminexus Developer Version 5

Cosminexus Primary Server Base Version 6

Cosminexus Primary Server Version 6

Hitachi Web Server

Hitachi Web Server - Security Enhancement

uCosminexus Application Server Express

uCosminexus Application Server Standard-R

uCosminexus Application Server Enterprise

uCosminexus Application Server Smart Edition

uCosminexus Application Server Standard

uCosminexus Developer 01

uCosminexus Developer Professional

uCosminexus Developer Professional for Plug-in

uCosminexus Developer Light

uCosminexus Developer Standard

uCosminexus Primary Server Base

uCosminexus Service Architect

uCosminexus Service Platform

uCosminexus Service Platform - Messaging

Google

Android

ヒューレット・パッカード・エンタープライズ

HPE Helion OpenStack 2.0

HPE Helion OpenStack 2.1

HPE Helion OpenStack 2.1.2

HPE Helion OpenStack 2.1.4

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-2108	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108
National Vulnerability Database (NVD)
2	CVE-2016-2108	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2108

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Android Open Source Project
1	Android Security Bulletin-July 2016	http://source.android.com/security/bulletin/2016-07-01.html
Apple Mailing Lists
2	APPLE-SA-2016-07-18-1 OS X El Capitan v10.11.6 and Security Update 2016-004	http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
Apple Security Updates
3	HT206903	https://support.apple.com/en-us/HT206903
Apple セキュリティアップデート
4	HT206903	https://support.apple.com/ja-jp/HT206903
HPE Security Bulletin
5	HPSBGN03610	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05149345
6	HPSBGN03620	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05164862
McAfee Security Bulletin
7	SB10160	https://kc.mcafee.com/corporate/index?page=content&id=SB10160
NEC製品セキュリティ情報
8	NV16-015	http://jpn.nec.com/security-info/secinfo/nv16-015.html
OpenSSL
9	OpenSSL 1.0.1 Series Release Notes	https://www.openssl.org/news/openssl-1.0.1-notes.html
10	OpenSSL 1.0.2 Series Release Notes	https://www.openssl.org/news/openssl-1.0.2-notes.html
OpenSSL Project
11	Fix ASN1_INTEGER handling.	https://git.openssl.org/?p=openssl.git;a=commit;h=f5da52e308a6aeea6d5f3df98c4da295d7e9cc27
12	Fix encoding bug in i2c_ASN1_INTEGER	https://git.openssl.org/?p=openssl.git;a=commit;h=3661bb4e7934668bd99ca777ea8b30eedfafa871
OpenSSL Security Advisory
13	Memory corruption in the ASN.1 encoder (CVE-2016-2108)	https://www.openssl.org/news/secadv/20160503.txt
Oracle Critical Patch Update
14	Oracle Critical Patch Update Advisory - July 2016	http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Oracle Technology Network
15	Oracle Linux Bulletin - April 2016	http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
16	Oracle Solaris Third Party Bulletin - April 2016	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
Red Hat Security Advisory
17	RHSA-2016:0722	http://rhn.redhat.com/errata/RHSA-2016-0722.html
18	RHSA-2016:0996	http://rhn.redhat.com/errata/RHSA-2016-0996.html
Security Advisories
19	SA40202	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202
Security Bulletin
20	JSA10759	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
Turbolinux Security Advisory
21	TLSA-2016-14	http://www.turbolinux.co.jp/security/2016/TLSA-2016-14j.html
サーバ・クライアント製品セキュリティ情報
22	サーバ・クライアント製品におけるOpenSSLの脆弱性(CVE-2016-2108)による影響について (hitachi-sec-2016-201)	http://www.hitachi.co.jp/products/it/server/security/info/vulnerable/openssl_cve2016-2108.html
ソフトウェア製品セキュリティ情報
23	HS16-023	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS16-023/index.html

その他

No	Name	URL
JVN
1	JVNVU#93163809	http://jvn.jp/vu/JVNVU93163809/
2	JVNVU#94844193	http://jvn.jp/vu/JVNVU94844193/
関連文書
3	株式会社アラタナの告知ページ (OpenSSL脆弱性への弊社対応状況について)	http://www.aratana.jp/security/detail.php?id=16

Change Log

No	Changed Details	Date of change
0	[2016年05月10日] 掲載 [2016年06月01日] ベンダ情報：ターボリナックス (TLSA-2016-14) を追加 [2016年06月06日] ベンダ情報：パルスセキュア (SA40202) を追加 [2016年06月24日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03620) を追加 [2016年06月27日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (サーバ・クライアント製品におけるOpenSSLの脆弱性(CVE-2016-2108)による影響について) を追加ベンダ情報：マカフィー (SB10160) を追加 [2016年08月04日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：アップル (HT206903) を追加ベンダ情報：アップル (APPLE-SA-2016-07-18-1 OS X El Capitan v10.11.6 and Security Update 2016-004) を追加参考情報：JVN (JVNVU#94844193) を追加 [2016年08月25日] ベンダ情報：Google (Android Security Bulletin-July 2016) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03610) を追加ベンダ情報：日本電気 (NV16-015) を追加ベンダ情報：レッドハット (RHSA-2016:0722) を追加ベンダ情報：レッドハット (RHSA-2016:0996) を追加影響を受けるシステム：ベンダ情報の追加に伴い内容を更新参考情報：関連文書 (株式会社アラタナの告知ページ (OpenSSL脆弱性への弊社対応状況について)) を追加 [2016年09月14日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (HS16-023) を追加 [2016年09月30日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2016年11月22日] ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - July 2016) を追加ベンダ情報：オラクル (Oracle Linux Bulletin - April 2016) を追加ベンダ情報：オラクル (Oracle Solaris Third Party Bulletin - April 2016) を追加 [2017年02月20日] ベンダ情報：ジュニパーネットワークス (JSA10759) を追加 [2017年07月25日] 影響を受けるシステム：ベンダ情報 (NV16-015) の更新に伴い内容を更新 [2017年10月03日] 影響を受けるシステム：ベンダ情報 (NV16-015) の更新に伴い内容を更新	Feb. 17, 2018, 10:37 a.m.

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl::::::::		1.0.1n
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::

Configuration3	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:::::::*
cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:o:google:android:5.1.0:::::::*
cpe:2.3:o:google:android:4.2:::::::*
cpe:2.3:o:google:android:4.1:::::::*
cpe:2.3:o:google:android:6.0.1:::::::*
cpe:2.3:o:google:android:6.0:::::::*
cpe:2.3:o:google:android:4.0.2:::::::*
cpe:2.3:o:google:android:4.4.3:::::::*
cpe:2.3:o:google:android:4.0.4:::::::*
cpe:2.3:o:google:android:4.3:::::::*
cpe:2.3:o:google:android:4.0.1:::::::*
cpe:2.3:o:google:android:4.2.1:::::::*
cpe:2.3:o:google:android:5.0.1:::::::*
cpe:2.3:o:google:android:5.0:::::::*
cpe:2.3:o:google:android:4.0.3:::::::*
cpe:2.3:o:google:android:4.0:::::::*
cpe:2.3:o:google:android:4.4:::::::*
cpe:2.3:o:google:android:4.4.1:::::::*
cpe:2.3:o:google:android:4.2.2:::::::*
cpe:2.3:o:google:android:4.3.1:::::::*
cpe:2.3:o:google:android:4.4.2:::::::*
cpe:2.3:o:google:android:5.1:::::::*
cpe:2.3:o:google:android:4.1.2:::::::*