CVE-2016-10259
Medium
Description
Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.
SeverityMedium
CVSS5.9
Exploit probability—
ProductBluecoat Ssl Visibility Appliance Sv1800 Firmware
PublishedApr 11, 2017
First seenApr 11, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluecoat ssl_visibility_appliance_sv1800_firmware | 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2, 3.11.2.1 | — |
| bluecoat ssl_visibility_appliance_sv800_firmware | 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2, 3.11.2.1 | — |
| bluecoat ssl_visibility_appliance_sv3800_firmware | 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2, 3.11.2.1 | — |
| bluecoat ssl_visibility_appliance_sv2800_firmware | 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2, 3.11.2.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.