CVE-2016-2107: The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocat...

Security readout for executives and security teams

This OpenSSL flaw can let a remote attacker recover sensitive plaintext from AES-CBC encrypted sessions by abusing a padding-oracle weakness. It affects older OpenSSL 1.0.1 and 1.0.2 releases before the named fixed versions. Treat internet-facing TLS services and embedded appliances using those builds as priority review items. Exposure is most likely on servers, appliances, or applications using vulnerable OpenSSL 1.0.1 or 1.0.2 builds with AES-NI and AES-CBC sessions. The provided structured affected-product list is incomplete, so product-specific exposure requires local inventory and vendor advisory checks. Prioritize remediation where vulnerable OpenSSL supports public-facing or sensitive-data TLS traffic. This is not described as code execution, but plaintext recovery can directly affect confidentiality and compliance obligations. Mitigation focus: Upgrade OpenSSL to 1.0.1t, 1.0.2h, or a vendor-patched supported release.; Apply relevant operating system or appliance vendor advisories for bundled OpenSSL packages.; Prioritize internet-facing TLS services and products handling sensitive data..

Prepared

Jun 13, 2026, 14:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.