VulnerabilityModified

CVE-2016-3099

mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.

HIGH 7.5EPSS 1.72%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.0: 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS: 1.72% probability · 76th percentile
CISA KEV: Not listed
Weakness: CWE-327
Affected: redhat/enterprise linux desktop · redhat/enterprise linux hpc node · redhat/enterprise linux server · redhat/enterprise linux workstation
Source: secalert@redhat.com

References

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2602.htmlVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1319052Issue Tracking, Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.htmlMailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2602.htmlVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1319052Issue Tracking, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.