CVE-2016-3099
Fixed in a distro release EPSS 2%
mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.
Products: redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | mod_nss | 0:1.0.14-7.el7 |
| Red Hat Enterprise Linux 7 | mod_nss-debuginfo | 0:1.0.14-7.el7 |
| SUSE Linux Enterprise Server 12 SP1 | apache2-mod_nss | 1.0.14-18.3 |
| SUSE Linux Enterprise Server 12-LTSS | apache2-mod_nss | 1.0.14-10.14.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 | apache2-mod_nss | 1.0.14-10.14.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | apache2-mod_nss | 1.0.14-18.3 |
| Ubuntu 16.04 LTS | libapache2-mod-nss | no fix |
| openSUSE Tumbleweed | apache2-mod_nss | 1.0.14-4.1 |