CVE-2016-2029
published 2016-06-08CVE-2016-2029: HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different…
PriorityP349critical9.1CVSS 3.0
AVNACLPRNUINSUCHIHAN
EPSS
4.17%
89.7th percentile
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | matrix_operating_environment | <= 7.5 | — |
| hp | systems_insight_manager | <= 7.5 | — |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4wv5-vfv3-96c7: HPE Matrix Operating Environment before 7
ghsa_unreviewed·2022-05-17·CVSS 8.1
CVE-2016-2029 [HIGH] GHSA-4wv5-vfv3-96c7: HPE Matrix Operating Environment before 7
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358.
GHSA
GHSA-5v2j-qjm6-mf78: HPE Matrix Operating Environment before 7
ghsa_unreviewed·2022-05-17·CVSS 9.1
CVE-2016-4358 [CRITICAL] GHSA-5v2j-qjm6-mf78: HPE Matrix Operating Environment before 7
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2029.
Red Hat
openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service
vendor_redhat·2018-01-24·CVSS 7.5
CVE-2016-10708 [HIGH] CWE-20 openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service
openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service
sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
Statement: This issue affects the versions of openssh as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 (versions 7.3 and earlier). For Red Hat Enterprise Linux 7 (versions 7.4 and later), this issue was fixed by the Security Advisory RHSA-2017:2029. For Red Hat Enterprise Linux 6, Red Hat Product Security has rated this issue as having Low security impact. A future update may address this issue. For additional information, refer to the Issue Severity
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-06-08
Published