CVE-2016-7798

The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for…

published January 30, 2017

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03167 · 87.8th percentile
Published
2017-01-30T22:00Z
EPSS history
Timeline
  • 30 JAN 22:00Z
    The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for…
    cvelistv5