Low severity3.7NVD Advisory· Published Feb 15, 2016· Updated Jun 17, 2026
CVE-2016-0701
CVE-2016-0701
Description
The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
111.0.2 before 1.0.2f+ 9 more
- (no CPE)range: 1.0.2 before 1.0.2f
- cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*
- cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
24- www.openssl.org/news/secadv/20160128.txtnvdVendor Advisory
- intothesymmetry.blogspot.com/2016/01/openssl-key-recovery-attack-on-dh-small.htmlnvd
- kb.juniper.net/InfoCenter/indexnvd
- lists.fedoraproject.org/pipermail/package-announce/2016-January/176373.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.htmlnvd
- www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlnvd
- www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlnvd
- www.securityfocus.com/bid/82233nvd
- www.securityfocus.com/bid/91787nvd
- www.securitytracker.com/id/1034849nvd
- www.ubuntu.com/usn/USN-2883-1nvd
- cert-portal.siemens.com/productcert/pdf/ssa-412672.pdfnvd
- git.openssl.orgnvd
- git.openssl.orgnvd
- h20566.www2.hpe.com/hpsc/doc/public/displaynvd
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvd
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvd
- security.gentoo.org/glsa/201601-05nvd
- www.kb.cert.org/vuls/id/257823nvd
- www.oracle.com/security-alerts/cpuapr2020.htmlnvd
- www.oracle.com/security-alerts/cpujan2020.htmlnvd
- www.oracle.com/security-alerts/cpujul2020.htmlnvd
- www.oracle.com/security-alerts/cpuoct2020.htmlnvd
- www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlnvd
News mentions
0No linked articles in our index yet.