{"id":"CVE-2016-3099","aliases":["EUVD-2016-4154","GHSA-6rg6-w3xx-cvm5","MGASA-2016-0197","RHSA-2016:2602","SUSE-SU-2016:2285-1","SUSE-SU-2016:2396-1","UBUNTU-CVE-2016-3099","openSUSE-SU-2024:10311-1"],"status":"published","title":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat...","description":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01786,"percentile":0.7847,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327"],"published":"2016-05-21T22:11:24Z","modified":"2026-06-26T10:32:11Z","fixes":[{"ecosystem":"Mageia:5","package":"apache-mod_nss","fixed_in":["1.0.14-1.2.mga5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_nss","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_nss-debuginfo","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_nss","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_nss-debuginfo","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_nss","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_nss-debuginfo","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_nss","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_nss-debuginfo","fixed_in":["0:1.0.14-7.el7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:5","package":"apache-mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-1.2.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.14-7.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"apache2-mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-18.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"apache2-mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-18.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"apache2-mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-10.14.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"apache2-mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-10.14.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libapache2-mod-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.11-1","1.0.12-1","1.0.12-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2-mod_nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.14-4.1"}]}],"bundled":4}],"products":[{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_hpc_node"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183102.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319052","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2602.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184345.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3099","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3099","tags":["report"]},{"url":"https://github.com/advisories/GHSA-6rg6-w3xx-cvm5"},{"url":"https://advisories.mageia.org/MGASA-2016-0197.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18276","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2016-April/183129.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1288471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1296685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1312583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1364560","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2602.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3099","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162285-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/972968","tags":["report"]},{"url":"https://bugzilla.suse.com/975394","tags":["report"]},{"url":"https://bugzilla.suse.com/979688","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3099","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162396-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-3099","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-3099","description":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.","status":"published","published":"2017-06-08T19:00:00Z","modified":"2024-08-05T23:47:56.955Z","updated_at":"2026-11-02T14:33:34.094161Z"}],"euvd":[{"id":"EUVD-2016-4154","description":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.","status":"published","published":"2017-06-08T19:00:00Z","modified":"2024-08-05T23:47:56Z","updated_at":"2026-11-03T02:22:51.132305Z"}],"ghsa":[{"id":"GHSA-6rg6-w3xx-cvm5","title":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat...","description":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.","status":"published","published":"2022-05-17T02:40:58Z","modified":"2023-02-10T05:06:19Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:54:01.286462Z"}],"nvd":[{"id":"CVE-2016-3099","description":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.","status":"published","published":"2017-06-08T19:29:00.213Z","modified":"2026-06-17T00:44:58.24Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:03:38.290327Z"}],"osv":[{"id":"UBUNTU-CVE-2016-3099","description":"mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to be enabled.","status":"published","published":"2017-06-08T19:29:00Z","modified":"2025-10-24T04:45:40Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:11.872222Z"},{"id":"MGASA-2016-0197","title":"Updated apache-mod_nss packages fix CVE-2016-3099","description":"Updated apache-mod_nss package fixes security vulnerability:\n\nAttempting to exclude ciphers from the list of accepted ciphers to use may\nnot work as expected (CVE-2016-3099).\n","status":"published","published":"2016-05-21T22:11:24Z","modified":"2026-04-16T06:24:36.537009136Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10311-1","title":"apache2-mod_nss-1.0.14-4.1 on GA media","description":"These are all security issues fixed in the apache2-mod_nss-1.0.14-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:00.342661Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2016:2602","title":"Red Hat Security Advisory: mod_nss security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:32:28Z","modified":"2026-06-26T10:32:11Z","updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"SUSE-SU-2016:2285-1","title":"Security update for apache2-mod_nss","description":"\nThis update provides apache2-mod_nss 1.0.14, which brings several fixes and\nenhancements:\n\n- Fix OpenSSL ciphers stopped parsing at +. (CVE-2016-3099)\n- Created valgrind suppression files to ease debugging.\n- Implement SSL_PPTYPE_FILTER to call executables to get the key password pins.\n- Improvements to migrate.pl.\n- Update default ciphers to something more modern and secure.\n- Check for host and netstat commands in gencert before trying to use them.\n- Add server support for DHE ciphers.\n- Extract SAN from server/client certificates into env\n- Fix memory leaks and other coding issues caught by clang analyzer.\n- Add support for Server Name Indication (SNI).\n- Add support for SNI for reverse proxy connections.\n- Add RenegBufferSize? option.\n- Add support for TLS Session Tickets (RFC 5077).\n- Fix logical AND support in OpenSSL cipher compatibility.\n- Correctly handle disabled ciphers. (CVE-2015-5244)\n- Implement a slew more OpenSSL cipher macros.\n- Fix a number of illegal memory accesses and memory leaks.\n- Support for SHA384 ciphers if they are available in NSS.\n- Add compatibility for mod_ssl-style cipher definitions.\n- Add TLSv1.2-specific ciphers.\n- Completely remove support for SSLv2.\n- Add support for sqlite NSS databases.\n- Compare subject CN and VS hostname during server start up.\n- Add support for enabling TLS v1.2.\n- Don't enable SSL 3 by default. (CVE-2014-3566)\n- Fix CVE-2013-4566.\n- Move nss_pcache to /usr/libexec.\n- Support httpd 2.4+.\n- Use apache2-systemd-ask-pass to prompt for a certificate passphrase.\n  (bsc#972968, bsc#975394)\n","status":"published","published":"2016-09-10T10:52:38Z","modified":"2025-05-02T04:03:59.36217Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2396-1","title":"Security update for apache2-mod_nss","description":"\nThis update provides apache2-mod_nss 1.0.14, which brings several fixes and\nenhancements:\n\n- Fix OpenSSL ciphers stopped parsing at +. (CVE-2016-3099)\n- Created valgrind suppression files to ease debugging.\n- Implement SSL_PPTYPE_FILTER to call executables to get the key password pins.\n- Improvements to migrate.pl.\n- Update default ciphers to something more modern and secure.\n- Check for host and netstat commands in gencert before trying to use them.\n- Add server support for DHE ciphers.\n- Extract SAN from server/client certificates into env\n- Fix memory leaks and other coding issues caught by clang analyzer.\n- Add support for Server Name Indication (SNI).\n- Add support for SNI for reverse proxy connections.\n- Add RenegBufferSize? option.\n- Add support for TLS Session Tickets (RFC 5077).\n- Fix logical AND support in OpenSSL cipher compatibility.\n- Correctly handle disabled ciphers. (CVE-2015-5244)\n- Implement a slew more OpenSSL cipher macros.\n- Fix a number of illegal memory accesses and memory leaks.\n- Support for SHA384 ciphers if they are available in NSS.\n- Add compatibility for mod_ssl-style cipher definitions.\n- Add TLSv1.2-specific ciphers.\n- Completely remove support for SSLv2.\n- Add support for sqlite NSS databases.\n- Compare subject CN and VS hostname during server start up.\n- Add support for enabling TLS v1.2.\n- Don't enable SSL 3 by default. (CVE-2014-3566)\n- Fix CVE-2013-4566.\n- Move nss_pcache to /usr/libexec.\n- Support httpd 2.4+.\n- SHA256 cipher names change spelling from *_sha256 to *_sha_256.\n- Use apache2-systemd-ask-pass to prompt for a certificate passphrase.\n  (bsc#972968, bsc#975394)\n","status":"published","published":"2016-09-27T13:12:22Z","modified":"2026-02-04T03:13:59.192251Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}