Strix
26.1K

CVE-2016-10259

UnknownEPSS 1.45%

Last modified

CVE-2016-10259 is a vulnerability of currently unknown severity. Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.. EPSS estimates a 1.45% chance of exploitation in the next 30 days.

Description

Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.

Metrics

EPSS Probability
1.45%

70.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
BluecoatSsl Visibility Appliance Sv1800 Firmware3.8.4
BluecoatSsl Visibility Appliance Sv1800 Firmware3.9
BluecoatSsl Visibility Appliance Sv1800 Firmware3.10
BluecoatSsl Visibility Appliance Sv1800 Firmware3.11
BluecoatSsl Visibility Appliance Sv1800 Firmware3.11.1.1
BluecoatSsl Visibility Appliance Sv1800 Firmware3.11.1.2
BluecoatSsl Visibility Appliance Sv1800 Firmware3.11.2.1
BluecoatSsl Visibility Appliance Sv800 Firmware3.8.4
BluecoatSsl Visibility Appliance Sv800 Firmware3.9
BluecoatSsl Visibility Appliance Sv800 Firmware3.10
BluecoatSsl Visibility Appliance Sv800 Firmware3.11
BluecoatSsl Visibility Appliance Sv800 Firmware3.11.1.1
BluecoatSsl Visibility Appliance Sv800 Firmware3.11.1.2
BluecoatSsl Visibility Appliance Sv800 Firmware3.11.2.1
BluecoatSsl Visibility Appliance Sv3800 Firmware3.8.4
BluecoatSsl Visibility Appliance Sv3800 Firmware3.9
BluecoatSsl Visibility Appliance Sv3800 Firmware3.10
BluecoatSsl Visibility Appliance Sv3800 Firmware3.11
BluecoatSsl Visibility Appliance Sv3800 Firmware3.11.1.1
BluecoatSsl Visibility Appliance Sv3800 Firmware3.11.1.2
BluecoatSsl Visibility Appliance Sv3800 Firmware3.11.2.1
BluecoatSsl Visibility Appliance Sv2800 Firmware3.8.4
BluecoatSsl Visibility Appliance Sv2800 Firmware3.9
BluecoatSsl Visibility Appliance Sv2800 Firmware3.10
BluecoatSsl Visibility Appliance Sv2800 Firmware3.11
BluecoatSsl Visibility Appliance Sv2800 Firmware3.11.1.1
BluecoatSsl Visibility Appliance Sv2800 Firmware3.11.1.2
BluecoatSsl Visibility Appliance Sv2800 Firmware3.11.2.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2016-10259?
Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.
How severe is CVE-2016-10259?
Severity scoring for CVE-2016-10259 is pending analysis. The EPSS model estimates a 1.45% probability of exploitation in the next 30 days.
How do I fix CVE-2016-10259?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-10259?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST