Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-0800

75
FAUCET Score

CVE-2016-0800, also known as the "DROWN" attack, is a critical vulnerability in the SSLv2 protocol affecting OpenSSL versions prior to 1.0.1s and 1.0.2g, as well as other products like PulseSecure. It allows remote attackers to decrypt TLS ciphertext by leveraging a Bleichenbacher RSA padding oracle. This vulnerability has a CVSS score of 5.9 (MEDIUM) due to its high impact on confidentiality and low attack complexity, with a very high EPSS score indicating significant exploitability. While not listed in CISA KEV, it has garnered substantial community discussion and media coverage, with a Metasploit module available for version detection, suggesting potential for exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
1.0.1CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*
1.0.1CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*
1.0.1CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*
1.0.1CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*
1.0.1aCPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.9MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
2.2
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
82.11%
Probability of exploitation in next 30 days
EPSS Percentile
99.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Metasploit: SSL/TLS Version Detection · Oct 14, 2014
This CVE's current EPSS score of 0.8211 is in the 100th percentile among its peer group of 19,954 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (26)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4 Extended Lifecycle SupportFixed in: openssl-0:0.9.7a-43.23.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssl-0:0.9.8e-39.el5_11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.6 Long LifeFixed in: openssl-0:0.9.8e-12.el5_6.13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.9 Long LifeFixed in: openssl-0:0.9.8e-26.el5_9.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: openssl-0:1.0.1e-42.el6_7.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: openssl098e-0:0.9.8e-20.el6_7.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.2 Advanced Update SupportFixed in: openssl-0:1.0.0-20.el6_2.8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: openssl-0:1.0.0-27.el6_4.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.5 Advanced Update SupportFixed in: openssl-0:1.0.1e-16.el6_5.16
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.6 Extended Update SupportFixed in: openssl-0:1.0.1e-30.el6_6.12
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.1e-51.el7_2.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: openssl098e-0:0.9.8e-29.el7_2.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.1 Extended Update SupportFixed in: openssl-1:1.0.1e-42.el7_1.10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6.4Fixed in: openssl
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Operations Network 3.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 2.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Web Server 3.0
View patch
redhatpatch availablevia redhat_api
Product: RHEV 3.X Hypervisor and Agents for RHEL-6Fixed in: rhev-hypervisor7-0:7.2-20160302.1.el6ev
View patch
redhatpatch availablevia redhat_api
Product: RHEV 3.X Hypervisor and Agents for RHEL-7Fixed in: rhev-hypervisor7-0:7.2-20160302.1.el7ev
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux Extended Update Support 7.2Fixed in: rhel-guest-image
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux Extended Update Support 5.6Fixed in: openssl
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux Extended Update Support 6.7Fixed in: guest-images
redhatno patchvia redhat_api
Product: Red Hat JBoss Operations Network 3.3Fixed in: CoreServer
redhatno patchvia redhat_api
Product: Red Hat JBoss Enterprise Web Server 2Fixed in: openssl
redhatno patchvia redhat_api
Product: Red Hat JBoss Enterprise Web Server 3Fixed in: openssl
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssl097a

Vendor Advisories (1)

redhatCVE-2016-0800Important

SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)

Mar 1, 2016

References

kb.juniper.net / InfoCenter/index
kb.juniper.net / InfoCenter/index
lists.opensuse.org / opensuse-security-announce/2016-03/msg00001.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00002.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00003.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00004.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00005.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00006.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00007.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00009.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00010.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00011.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00012.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00017.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00025.html
lists.opensuse.org / opensuse-security-announce/2016-04/msg00038.html
lists.opensuse.org / opensuse-security-announce/2016-05/msg00015.html
lists.opensuse.org / opensuse-security-announce/2016-05/msg00017.html
marc.info
marc.info
marc.info
rhn.redhat.com / errata/RHSA-2016-1519.html
access.redhat.com / security/vulnerabilities/drown
cert-portal.siemens.com / productcert/pdf/ssa-412672.pdf
cert-portal.siemens.com / productcert/pdf/ssa-623229.pdf
drownattack.com
h20566.www2.hpe.com / hpsc/doc/public/display
h20566.www2.hpe.com / hpsc/doc/public/display
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
help.ecostruxureit.com / display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
ics-cert.us-cert.gov / advisories/ICSA-16-103-03
kb.pulsesecure.net / articles/Pulse_Security_Advisories/SA40168
kc.mcafee.com / corporate/index
security.freebsd.org / advisories/FreeBSD-SA-16:12.openssl.asc
security.gentoo.org / glsa/201603-15
security.netapp.com / advisory/ntap-20160301-0001
support.citrix.com / article/CTX208403
arista.com / en/support/advisories-notices/security-advisories/1260-security-advisory-18
kb.cert.org / vuls/id/583776
openssl.org / news/secadv/20160301.txt
tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
huawei.com / en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en
oracle.com / technetwork/security-advisory/cpuapr2016v3-2985753.html
oracle.com / technetwork/security-advisory/cpujan2018-3236628.html
oracle.com / technetwork/security-advisory/cpujul2016-2881720.html
oracle.com / technetwork/topics/security/bulletinapr2016-2952098.html
oracle.com / technetwork/topics/security/bulletinjan2016-2867206.html
oracle.com / technetwork/topics/security/linuxbulletinjan2016-2867209.html
oracle.com / technetwork/topics/security/ovmbulletinjul2016-3090546.html
securityfocus.com / bid/83733
securityfocus.com / bid/91787
securitytracker.com / id/1035133
siemens.com / cert/pool/cert/siemens_security_advisory_ssa-623229.pdf