CVE-2016-0736

Published: Jul 27, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.

Affected (17)

Products: Apache: Http Server

Apache

1 product

Http Server

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 2.4.0
Apache Http Server	Version 2.4.10
Apache Http Server	Version 2.4.12
Apache Http Server	Version 2.4.14
Apache Http Server	Version 2.4.16
Apache Http Server	Version 2.4.19
Apache Http Server	Version 2.4.1
Apache Http Server	Version 2.4.20
Apache Http Server	Version 2.4.21
Apache Http Server	Version 2.4.22
Apache Http Server	Version 2.4.23
Apache Http Server	Version 2.4.2
Apache Http Server	Version 2.4.3
Apache Http Server	Version 2.4.6
Apache Http Server	Version 2.4.7
Apache Http Server	Version 2.4.8
Apache Http Server	Version 2.4.9

Related CWEs

CWE-310

References (54)

http://rhn.redhat.com/errata/RHSA-2017-1415.html

Source: security@apache.org

http://www.debian.org/security/2017/dsa-3796

Source: security@apache.org

http://www.securityfocus.com/bid/95078

Source: security@apache.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037508

Source: security@apache.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:0906

Source: security@apache.org

https://access.redhat.com/errata/RHSA-2017:1161

Source: security@apache.org

https://access.redhat.com/errata/RHSA-2017:1413

Source: security@apache.org

https://access.redhat.com/errata/RHSA-2017:1414

Source: security@apache.org

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us

Source: security@apache.org

Third Party Advisory

https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-0736

Source: security@apache.org

Vendor Advisory

https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E

Source: security@apache.org

https://security.gentoo.org/glsa/201701-36

Source: security@apache.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20180423-0001/

Source: security@apache.org

https://support.apple.com/HT208221

Source: security@apache.org

https://www.exploit-db.com/exploits/40961/

Source: security@apache.org

https://www.tenable.com/security/tns-2017-04

Source: security@apache.org

http://rhn.redhat.com/errata/RHSA-2017-1415.html