What is PAN-SA-2016-0030?

PAN-SA-2016-0030 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. PAN-SA-2016-0030 OpenSSL Vulnerabilities

Which CVE IDs does PAN-SA-2016-0030 cover?

PAN-SA-2016-0030 covers the following CVE IDs: CVE-2016-0703, CVE-2016-0704, CVE-2016-0800. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by PAN-SA-2016-0030?

PAN-SA-2016-0030 affects 1 product, including: PAN-OS.

PAN-SA-2016-0030Medium

PAN-SA-2016-0030 OpenSSL Vulnerabilities

Vendor

Palo Alto Networks Security Advisories

Published

October 18, 2016

Last Modified

October 18, 2016

🔗 CVE IDs covered (3)

CVE-2016-0703 →CVE-2016-0704 →CVE-2016-0800 →

📋 Description

The OpenSSL library has been found to contain vulnerabilities CVE-2016-0703, CVE-2016-0704, and CVE-2016-0800. Palo Alto Networks software makes use of the vulnerable library. (Ref # PAN-55477/92481) The OpenSSL library in use by PAN-OS is patched on a regular basis. Severities of the CVEs listed under the summary section range from moderate to high but have not been shown to be exploitable at the time of this advisory. This issue affects PAN-OS 5.0; PAN-OS 5.1; PAN-OS 6.0.14 and earlier; PAN-OS 6.1.11 and earlier

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 6.0.15 and later; PAN-OS 6.1.12 and later Workarounds and mitigations: N/A

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2016-0030