[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fR63SGA8OZ6M9KwP6tL5YkPWUGoqgRB4LWdujXB0Oa9E":3,"g5a-risk:CVE-2016-7798":166},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":107,"weaknesses":108,"weaknessesCount":117,"isActivelyExploited":118,"cisaInfo":26,"otxData":26,"relatedBlogPosts":119,"seoMetadata":120,"configurations":145,"relatedVendorCves":162,"notableEvents":163},"CVE-2016-7798","What is CVE-2016-7798?","The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for context-dependent attackers to bypass the encryption protection mechanism.","The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for contex...","2017-01-30T22:59:00.747","2025-04-20T01:37:25.86",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.03167,[39,39,39,39,39,39,39],"High",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ruby-lang","openssl","*","cpe:2.3:a:ruby-lang:openssl:*:*:*:*:*:ruby:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",3,[58,64,68,71,76,80,84,88,91,93,95,97,99,101,103,105],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F09\u002F19\u002F9","Openwall",[62,63],"Mailing List","Third Party Advisory",{"url":65,"source":60,"tags":66},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F09\u002F30\u002F6",[62,67,63],"Patch",{"url":69,"source":60,"tags":70},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F10\u002F01\u002F2",[62,63],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F93031","Securityfocus",[63,75],"VDB Entry",{"url":77,"source":78,"tags":79},"https:\u002F\u002Fgithub.com\u002Fruby\u002Fopenssl\u002Fcommit\u002F8108e0a6db133f3375608303fdd2083eb5115062","GitHub",[67,63],{"url":81,"source":78,"tags":82},"https:\u002F\u002Fgithub.com\u002Fruby\u002Fopenssl\u002Fissues\u002F49",[83,63],"Exploit",{"url":85,"source":86,"tags":87},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F07\u002Fmsg00012.html","Debian",[62,63],{"url":89,"source":86,"tags":90},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-3966",[63],{"url":59,"source":60,"tags":92},[62,63],{"url":65,"source":60,"tags":94},[62,67,63],{"url":69,"source":60,"tags":96},[62,63],{"url":72,"source":73,"tags":98},[63,75],{"url":77,"source":78,"tags":100},[67,63],{"url":81,"source":78,"tags":102},[83,63],{"url":85,"source":86,"tags":104},[62,63],{"url":89,"source":86,"tags":106},[63],16,[109],{"id":110,"name":111,"description":112,"extendedDescription":113,"status":114,"abstraction":115,"structure":116},"CWE-326","Inadequate Encryption Strength","The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.","A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.","Draft","Class","Simple",1,false,[],{"title":121,"metaDescription":122,"keywords":123,"canonicalUrl":124,"structuredData":125},"What is CVE-2016-7798? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-7798, a high severity cyber security vulnerability from 2017. The openssl gem for Ruby uses the same initialization vector...","CVE-2016-7798, CVE-2016-7798 vulnerability, CVE-2016-7798 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, ruby-lang security, debian security, openssl vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2016-7798",{"@context":126,"@type":127,"headline":121,"description":122,"datePublished":10,"dateModified":11,"author":128,"publisher":132,"about":136,"mainEntityOfPage":140,"articleSection":143,"keywords":144},"https:\u002F\u002Fschema.org","TechArticle",{"@type":129,"name":130,"url":131},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":129,"name":130,"url":131,"logo":133},{"@type":134,"url":135},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":137,"name":6,"description":138,"additionalType":139},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":141,"@id":142},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-7798","Cybersecurity","CVE-2016-7798, CVE-2016-7798 vulnerability, CVE-2016-7798 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[146,154],{"Operator":26,"Negate":26,"Nodes":147},[148],{"Operator":149,"Negate":26,"CPEMatch":150},"OR",[151],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":153,"VersionEndIncluding":26},"5A99A902-22BC-4E8A-92CD-58A7ABA19A5E","2.0.0",{"Operator":26,"Negate":26,"Nodes":155},[156],{"Operator":149,"Negate":26,"CPEMatch":157},[158,160],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":165,"version":32},1792261174004,{"score":167,"band":168,"action":169,"scoredAt":170},48,"Medium","Plan remediation","2026-10-17T08:26:55.338884+00:00"]