UpHeron
All vulnerabilities

Servers and applications

CVE-2016-0701

The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.

Severity
Low 3.7
Published
15 Feb 2016
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 1.0.2e
  • Version 1.0.2d
  • Version 1.0.2c
  • Version 1.0.2b
All 9 release lines
  • Version 1.0.2-beta1
  • Version 1.0.2-beta2
  • Version 1.0.2-beta3
  • Version 1.0.2
  • Version 1.0.2a
  • Version 1.0.2b
  • Version 1.0.2c
  • Version 1.0.2d
  • Version 1.0.2e

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-0701
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-0701