PAN-SA-2016-0023High

PAN-SA-2016-0023 OpenSSL Vulnerabilities

Published
September 2, 2016
Last Modified
September 2, 2016

🔗 CVE IDs covered (5)

CVE-2016-2105 →CVE-2016-2106 →CVE-2016-2107 →CVE-2016-2109 →CVE-2016-2176 →

📋 Description

The OpenSSL library embedded in the GlobalProtect™ agent, TerminalServer™ agent and UserID™ agent is affected by the following public vulnerabilities: CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176 (Ref # 100669, 100133, PAN-60833). At the time of this advisory and in the context of GlobalProtect, TerminalServer and UserID, no public exploitation of these vulnerabilities are known. This issue affects GlobalProtect agent 3.1.0 and earlier; TerminalServer agent 7.0.5 and earlier; UserID agent 7.0.5 and earlier

🎯 Affected products3

  • GlobalProtect App
  • Terminal Server Agent
  • User-ID Agent

✅ Remediation

GlobalProtect App 3.1.1 and later; Terminal Server Agent 7.0.6 and later; User-ID Agent 7.0.6 and later Workarounds and mitigations: N/A

🔗 References (1)