Upstream information

CVE-2016-2217 at MITRE

Description

The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.

SUSE information

Overall state of this security issue: Does not affect SUSE products

Note from the SUSE Security Team

We have not shipped the affected socat version, so SUSE Linux Enterprise 12 and older were not affected.

SUSE Bugzilla entry: 964843 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Fri Oct 7 12:47:33 2022
CVE page last modified: Fri Oct 7 12:47:33 2022