CVE-2016-0701

Publication date 28 January 2016

Last updated 25 August 2025

Ubuntu priority

Cvss 3 Severity Score

Description

The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
openssl	15.10 wily	Fixed 1.0.2d-0ubuntu1.3
	15.04 vivid	Not affected
	14.04 LTS trusty	Not affected
	12.04 LTS precise	Not affected
openssl098	15.10 wily	Not in release
	15.04 vivid	Not affected
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not affected

Notes

mdeslaur

1.0.2 only

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
openssl	Upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=878e2c5b13010329c203f309ed0c8f2113f85648 Upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=c5b831f21d0d29d1e517d139d9d101763f60c9a2 Upstream: https://git.openssl.org/?p=openssl.git;a=commit;h=75374adf8a6ff69d6718952121875a491ed2cd29

Severity score breakdown

Parameter	Value
Base score	3.7 · Low
Attack vector	Network
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity impact	None
Availability impact	None
Vector	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Related Ubuntu Security Notices (USN)

USN-2883-1
OpenSSL vulnerability
28 January 2016