{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/ubuntu16.04els/vex/2025/cve-2025-11187-els_os-ubuntu16_04els.json" } ], "tracking": { "current_release_date": "2026-02-12T12:41:42Z", "generator": { "date": "2026-02-12T12:41:42Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2025-11187-ELS_OS-UBUNTU16.04ELS", "initial_release_date": "2025-01-01T00:00:00Z", "revision_history": [ { "date": "2025-01-01T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-02-12T12:41:42Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2025-11187" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu 16.04", "product": { "name": "Ubuntu 16.04", "product_id": "Ubuntu-16", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" }, { "branches": [ { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21.all", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libssl-doc@1.0.2g-1ubuntu4.21?arch=all" } } } ], "category": "architecture", "name": "all" }, { "branches": [ { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libssl1.0.0@1.0.2g-1ubuntu4.21?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@1.0.2g-1ubuntu4.21?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els6?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els8?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els9?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els10?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els11?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product_id": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-dev@1.0.2g-1ubuntu4.21%2Btuxcare.els12?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els6?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els8?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els9?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els10?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els11?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product_id": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl1.0.0@1.0.2g-1ubuntu4.21%2Btuxcare.els12?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els6?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els8?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els9?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els10?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els11?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product_id": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/openssl@1.0.2g-1ubuntu4.21%2Btuxcare.els12?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els5?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els6?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els7?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els8?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els9?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els10?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els11?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all", "product": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all", "product_id": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/libssl-doc@1.0.2g-1ubuntu4.21%2Btuxcare.els12?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64" }, "product_reference": "libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all" }, "product_reference": "libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64" }, "product_reference": "libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "relates_to_product_reference": "Ubuntu-16" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64 as a component of Ubuntu 16.04", "product_id": "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64" }, "product_reference": "openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "relates_to_product_reference": "Ubuntu-16" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-11187", "cwe": { "id": "CWE-233", "name": "Improper Handling of Parameters" }, "notes": [ { "category": "description", "text": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21.amd64", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21.all", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-11187" } ], "release_date": "2026-01-27T00:00:00Z", "remediations": [ { "category": "no_fix_planned", "details": "This flaw is only reachable when a user or application imports/verifies an attacker-supplied PKCS#12 keystore using PBMAC1—a non-network code path that requires local user interaction—so it is not exposed by normal TLS traffic. The practical impact is primarily a crash (DoS); code execution is speculative and depends on platform/toolchain mitigations. Systems on OpenSSL 3.3/3.0/1.1.1/1.0.2 or using the FIPS modules in 3.6/3.5/3.4 are unaffected, and enterprise server/VM workflows typically provision PKCS#12 files via trusted channels, leaving minimal realistic attack surface.", "product_ids": [ "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21.amd64", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21.all", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els2.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els3.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els4.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:libssl-dev-0:1.0.2g-1ubuntu4.21.amd64", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els10.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els11.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els12.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els5.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els6.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els7.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els8.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21+tuxcare.els9.all", "Ubuntu-16:libssl-doc-0:1.0.2g-1ubuntu4.21.all", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:libssl1.0.0-0:1.0.2g-1ubuntu4.21.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els10.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els11.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els12.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els5.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els6.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els7.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els8.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21+tuxcare.els9.amd64", "Ubuntu-16:openssl-0:1.0.2g-1ubuntu4.21.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }