For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yuanqiang_22112's avatar
yuanqiang_22112
Icon for Nimbostratus rankNimbostratus
Nov 01, 2016

CVE-2016-8610:ssl death alert

Hello ereryone: F5-BIG-IP V11.5.1 hotfix10, my customer want to know whether the F5 has been repaired CVE-2016-8610:ssl death alert ? ask f5 not found any information about "cve-20...
application delivery
ASM Advanced WAF
LTM
security
Shaun_Simmons1's avatar
Shaun_Simmons1
Icon for Altostratus rankAltostratus
Nov 01, 2016

Quick Reference info:

 

https://access.redhat.com/security/cve/CVE-2016-8610

 

Affected Versions:

 

OpenSSL All 0.9.8 OpenSSL All 1.0.1 OpenSSL 1.0.2 through 1.0.2h OpenSSL 1.1.0

 

Not Affected Versions:

 

OpenSSL 1.0.2i, 1.0.2j OpenSSL 1.1.0a, 1.1.0b

 

What protocol versions are affected? -All versions (SSL3.0, TLS1.0, TLS1.1, TLS1.2) are affected.

 

Openssl Version check: > rpm -q openssl