H1-136986 — Vulnetix

H1-136986 PUBLISHED

Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)

Exploit Intelligence

Docker container implementing tests for CVE-2016-2107 - LuckyNegative20 (github-poc)
Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107) (github-poc)
Padding oracle in AES-NI CBC MAC check (CVE-2016-2107) (hackerone)
Padding oracle in AES-NI CBC MAC check (CVE-2016-2107) (hackerone)

Timeline

May 19, 2016 CVE Published
May 19, 2016 PoC Published

References

Padding oracle in AES-NI CBC MAC check (CVE-2016-2107) advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›