Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-0704

20
FAUCET Score

CVE-2016-0704 is a medium-severity vulnerability affecting OpenSSL versions before 0.9.8zf, 1.0.0r, 1.0.1m, and 1.0.2a. It involves an oracle protection mechanism flaw in the SSLv2 implementation that, when using export cipher suites, overwrites incorrect MASTER-KEY bytes. This makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle attack. The attack has high complexity but can lead to high confidentiality impact, with no known active exploitation, publicly available exploit code, or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
<= 0.9.8zeCPE matchmatch criteria
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
1.0.0CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*
1.0.0CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*
1.0.0CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*
1.0.0CPE matchmatch criteria
cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.9MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
2.2
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
6.90%
Probability of exploitation in next 30 days
EPSS Percentile
93.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0690 is in the 92nd percentile among its peer group of 19,955 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (17)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4 Extended Lifecycle SupportFixed in: openssl-0:0.9.7a-43.23.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssl-0:0.9.8e-33.el5_11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.6 Long LifeFixed in: openssl-0:0.9.8e-12.el5_6.13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.9 Long LifeFixed in: openssl-0:0.9.8e-26.el5_9.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: openssl-0:1.0.1e-30.el6_6.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: openssl098e-0:0.9.8e-20.el6_7.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.2 Advanced Update SupportFixed in: openssl-0:1.0.0-20.el6_2.8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: openssl-0:1.0.0-27.el6_4.5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.5 Advanced Update SupportFixed in: openssl-0:1.0.1e-16.el6_5.16
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.1e-42.el7_1.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: openssl098e-0:0.9.8e-29.el7_2.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Storage 2.1Fixed in: openssl-0:1.0.1e-30.el6_6.7
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: openssl
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Web Server 1Fixed in: openssl
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Web Server 2Fixed in: openssl
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Enterprise Web Server 3Fixed in: openssl
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: openssl097a

Vendor Advisories (1)

redhatCVE-2016-0704Moderate

openssl: SSLv2 Bleichenbacher protection overwrites wrong bytes for export ciphers

Mar 1, 2016

References

kb.juniper.net / InfoCenter/index
lists.opensuse.org / opensuse-security-announce/2016-03/msg00001.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00002.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00003.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00004.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00006.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00007.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00009.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00010.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00012.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00017.html
lists.opensuse.org / opensuse-security-announce/2016-03/msg00025.html
lists.opensuse.org / opensuse-security-announce/2016-04/msg00038.html
openssl.org / news/secadv/20160301.txt
Vendor Advisory
cert-portal.siemens.com / productcert/pdf/ssa-412672.pdf
drownattack.com
git.openssl.org
h20566.www2.hpe.com / hpsc/doc/public/display
kb.pulsesecure.net / articles/Pulse_Security_Advisories/SA40168
security.freebsd.org / advisories/FreeBSD-SA-16:12.openssl.asc
security.gentoo.org / glsa/201603-15
openssl.org / news/secadv/20160301.txt
tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
oracle.com / technetwork/security-advisory/cpujan2018-3236628.html
oracle.com / technetwork/topics/security/bulletinapr2016-2952098.html
oracle.com / technetwork/topics/security/bulletinjan2016-2867206.html
oracle.com / technetwork/topics/security/linuxbulletinjan2016-2867209.html
securityfocus.com / bid/83764
securitytracker.com / id/1035133