CVE-2016-2107 icon indicating copy to clipboard operation
CVE-2016-2107 copied to clipboard

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

Results 4 CVE-2016-2107 issues
Sort by recently updated
recently updated
newest added

It would be nice to add the capabilities of testing other king of SSL/TLS services like SMTP.

What does it mean when I get one of the following errors? - [timestamp] read tcp [ip]:[port]->[ip]:443: read: connection reset by peer - [timestamp] expected a remote error

which in my tests proved to be around 10 times the required time to get a response from a patched or vulnerable server - but it of course depends on...

When I checked the "Encrypted alert" for may of the ssl sites, it said decryption_failed_RESERVED(21). Whereas the script still reported it as vulnerable/true.