Return
-
Title
About the Multiple Vulnerability issues on JVNVU#98667810 OpenSSL -
Description
Do below OpenSSL vulnerabilities affect NVBU?
- CVE-2016-6304- CVE-2016-6305- CVE-2016-2183(SWEET32)- CVE-2016-6303- CVE-2016-6302- CVE-2016-2182- CVE-2016-2180- CVE-2016-2177- CVE-2016-2178- CVE-2016-2179- CVE-2016-2181- CVE-2016-6306- CVE-2016-6307- CVE-2016-6308 -
Cause
From NVBU 10.x, NVBU uses OpenSSL versions prior to OpenSSl 1.0.1u so that it may affect the product. -
Resolution
This issue has been resolved starting NVBU 11.4 where OpenSSL Third Party Component was upgraded to 1.0.2k.
Please upgrade to NVBU 11.4 and above to protect against the above mentioned OpenSSL vulnerabilities.