CVE-2016-0701

—

CVSS 3.0

3.7 low

EPSS

84%p100

Published

Feb 15, 2016 (Feb 15, 2016)

Modified

Jun 17, 2026

Description

The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.

Vendors: openssl
Products: openssl
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (83.6%)

In the news1 stories

OpenSSL will patch this week high severity vulnerability

Security AffairsSep 20, 10:14 UTC · Sep 20, 2016Vulnerability CVE-2016-2107 CVE-2013-0169 CVE-2016-0701