CVE-2016-3616

Key facts

CVSS score

8.8 (v3.0)

Severity

HIGH

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-476

EPSS score

4.4% (91th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2016-4642)

Published

February 13, 2017

NVD last modified

June 17, 2026

Status

Modified

Affected products

• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• libjpeg-turbo / libjpeg-turbo
• redhat / enterprise linux

Certified products that may be affected

7 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 7 NSS Cryptographic Module - Red Hat®, Inc. - FIPS 140 4498 - historical
• Red Hat Enterprise Linux 7 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 3939 - historical
• Red Hat Enterprise Linux 7 OpenSSH Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 3891 - historical
• Red Hat Enterprise Linux 7 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 3892 - historical
• Red Hat Enterprise Linux 7 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 3867 - historical

See all 7 in the Security Certifications Explorer.

References

• https://access.redhat.com/errata/RHSA-2019:2052
• https://bugzilla.redhat.com/show_bug.cgi?id=1318509(Issue Tracking, Third Party Advisory, VDB Entry)
• https://bugzilla.redhat.com/show_bug.cgi?id=1319661(Issue Tracking, Third Party Advisory, VDB Entry)
• https://lists.debian.org/debian-lts-announce/2019/01/msg00015.html(Third Party Advisory)
• https://usn.ubuntu.com/3706-1/(Third Party Advisory)
• https://usn.ubuntu.com/3706-2/(Third Party Advisory)