{"schemaVersion":3,"id":"CVE-2002-20001","aliases":["openSUSE-SU-2024:11905-1","openSUSE-SU-2024:13932-1"],"status":"published","duplicateOf":null,"title":null,"description":"The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.","dates":{"published":"2021-11-11T00:00:00.000Z","modified":"2025-02-13T16:27:06.803Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.24639,"percentile":0.9787,"severity":"high","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.24639},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.24639,"percentile":0.9787}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.24639,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.24639,"percentile":0.9787}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_9BE18C03A969E010","name":"Exploit Reference (researchgate.net)","source":"reference","url":"https://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"balasys","product":"dheater","name":"dheater","label":"dheater","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/balasys/dheater"},{"vendor":"f5","product":"big-ip_access_policy_manager","name":"big-ip access policy manager","label":"big-ip_access_policy_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, < 16.1.4","noFixRecorded":false,"fixedIn":null},{"text":"≥ 17.0.0, < 17.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, < 16.1.4 | ≥ 17.0.0, < 17.1.0","eol":null,"hubHref":"/vendor/f5/big-ip_access_policy_manager"},{"vendor":"f5","product":"big-ip_advanced_firewall_manager","name":"big-ip advanced firewall manager","label":"big-ip_advanced_firewall_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_advanced_firewall_manager"},{"vendor":"f5","product":"big-ip_advanced_web_application_firewall","name":"big-ip advanced web application firewall","label":"big-ip_advanced_web_application_firewall","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_advanced_web_application_firewall"},{"vendor":"f5","product":"big-ip_analytics","name":"big-ip analytics","label":"big-ip_analytics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_analytics"},{"vendor":"f5","product":"big-ip_application_acceleration_manager","name":"big-ip application acceleration manager","label":"big-ip_application_acceleration_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_application_acceleration_manager"},{"vendor":"f5","product":"big-ip_application_security_manager","name":"big-ip application security manager","label":"big-ip_application_security_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_application_security_manager"},{"vendor":"f5","product":"big-ip_application_visibility_and_reporting","name":"big-ip application visibility and reporting","label":"big-ip_application_visibility_and_reporting","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_application_visibility_and_reporting"},{"vendor":"f5","product":"big-ip_carrier-grade_nat","name":"big-ip carrier-grade nat","label":"big-ip_carrier-grade_nat","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_carrier-grade_nat"},{"vendor":"f5","product":"big-ip_ddos_hybrid_defender","name":"big-ip ddos hybrid defender","label":"big-ip_ddos_hybrid_defender","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_ddos_hybrid_defender"},{"vendor":"f5","product":"big-ip_domain_name_system","name":"big-ip domain name system","label":"big-ip_domain_name_system","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_domain_name_system"},{"vendor":"f5","product":"big-ip_edge_gateway","name":"big-ip edge gateway","label":"big-ip_edge_gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_edge_gateway"},{"vendor":"f5","product":"big-ip_fraud_protection_service","name":"big-ip fraud protection service","label":"big-ip_fraud_protection_service","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_fraud_protection_service"},{"vendor":"f5","product":"big-ip_global_traffic_manager","name":"big-ip global traffic manager","label":"big-ip_global_traffic_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_global_traffic_manager"},{"vendor":"f5","product":"big-ip_link_controller","name":"big-ip link controller","label":"big-ip_link_controller","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_link_controller"},{"vendor":"f5","product":"big-ip_local_traffic_manager","name":"big-ip local traffic manager","label":"big-ip_local_traffic_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_local_traffic_manager"},{"vendor":"f5","product":"big-ip_policy_enforcement_manager","name":"big-ip policy enforcement manager","label":"big-ip_policy_enforcement_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_policy_enforcement_manager"},{"vendor":"f5","product":"big-ip_service_proxy","name":"big-ip service proxy","label":"big-ip_service_proxy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.6.0","eol":null,"hubHref":"/vendor/f5/big-ip_service_proxy"},{"vendor":"f5","product":"big-ip_ssl_orchestrator","name":"big-ip ssl orchestrator","label":"big-ip_ssl_orchestrator","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_ssl_orchestrator"},{"vendor":"f5","product":"big-ip_webaccelerator","name":"big-ip webaccelerator","label":"big-ip_webaccelerator","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_webaccelerator"},{"vendor":"f5","product":"big-ip_websafe","name":"big-ip websafe","label":"big-ip_websafe","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 13.1.0, ≤ 17.1.2","noFixRecorded":false,"fixedIn":null},{"text":"17.5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 13.1.0, ≤ 17.1.2 | 17.5.0","eol":null,"hubHref":"/vendor/f5/big-ip_websafe"},{"vendor":"f5","product":"big-iq_centralized_management","name":"big-iq centralized management","label":"big-iq_centralized_management","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.0, ≤ 8.4.0","noFixRecorded":false,"fixedIn":null},{"text":"7.1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0, ≤ 8.4.0 | 7.1.0","eol":null,"hubHref":"/vendor/f5/big-iq_centralized_management"},{"vendor":"f5","product":"f5os-a","name":"f5os-a","label":"f5os-a","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 1.3.0, ≤ 1.3.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.5.0, ≤ 1.5.3","noFixRecorded":false,"fixedIn":null},{"text":"1.8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.3.0, ≤ 1.3.2 | ≥ 1.5.0, ≤ 1.5.3 | 1.8.0","eol":null,"hubHref":"/vendor/f5/f5os-a"},{"vendor":"f5","product":"f5os-c","name":"f5os-c","label":"f5os-c","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 1.3.0, ≤ 1.3.2","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.6.0, ≤ 1.6.2","noFixRecorded":false,"fixedIn":null},{"text":"1.5.0","noFixRecorded":false,"fixedIn":null},{"text":"1.5.1","noFixRecorded":false,"fixedIn":null},{"text":"1.8.0","noFixRecorded":false,"fixedIn":null},{"text":"1.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.3.0, ≤ 1.3.2 | ≥ 1.6.0, ≤ 1.6.2 | 1.5.0 | 1.5.1 | 1.8.0 | 1.8.1","eol":null,"hubHref":"/vendor/f5/f5os-c"},{"vendor":"f5","product":"traffix_signaling_delivery_controller","name":"traffix signaling delivery controller","label":"traffix_signaling_delivery_controller","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.1.0","noFixRecorded":false,"fixedIn":null},{"text":"5.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.1.0 | 5.2.0","eol":null,"hubHref":"/vendor/f5/traffix_signaling_delivery_controller"},{"vendor":"hpe","product":"arubaos-cx","name":"arubaos-cx","label":"arubaos-cx","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 10.06.0000, < 10.06.0180","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.07.0000, < 10.07.0030","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.08.0000, < 10.08.0010","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.09.0000, < 10.09.0002","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.06.0000, < 10.06.0180 | ≥ 10.07.0000, < 10.07.0030 | ≥ 10.08.0000, < 10.08.0010 | ≥ 10.09.0000, < 10.09.0002","eol":null,"hubHref":"/vendor/hpe/arubaos-cx"},{"vendor":"opensuse","product":"openssl-1_1&distro=openSUSE Tumbleweed","name":"openssl-1_1","label":"openssl-1_1&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/openssl-1_1&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 1.1.1m-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.1m-4.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"ssh-audit&distro=openSUSE Tumbleweed","name":"ssh-audit","label":"ssh-audit&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/ssh-audit&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 3.2.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.0-1.1","eol":null,"hubHref":null},{"vendor":"stormshield","product":"stormshield_management_center","name":"stormshield management center","label":"stormshield_management_center","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.3","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"sns-smc","label":"Stormshield Management Center","category":"os"}},"hubHref":"/vendor/stormshield/stormshield_management_center"},{"vendor":"stormshield","product":"stormshield_network_security","name":"stormshield network security","label":"stormshield_network_security","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.7.0, < 4.3.16","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.4.0, < 4.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.7.0, < 4.3.16 | ≥ 4.4.0, < 4.6.3","eol":null,"hubHref":"/vendor/stormshield/stormshield_network_security"},{"vendor":"suse","product":"linux_enterprise_server","name":"linux enterprise server","label":"linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11","noFixRecorded":false,"fixedIn":null},{"text":"12","noFixRecorded":false,"fixedIn":null},{"text":"15","noFixRecorded":false,"fixedIn":null}],"versionsText":"11 | 12 | 15","eol":null,"hubHref":"/vendor/suse/linux_enterprise_server"}],"affectedCount":31,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/Balasys/dheater","label":"github.com/Balasys/dheater","hostname":"github.com","tags":["Product","Third Party Advisory"]},{"url":"https://www.researchgate.net/profile/Anton-Stiglic-2/publication/2401745_Security_Issues_in_the_Diffie-Hellman_Key_Agreement_Protocol","label":"www.researchgate.net/profile/…","hostname":"www.researchgate.net","tags":["Exploit","Technical Description"]},{"url":"https://www.reddit.com/r/netsec/comments/qdoosy/server_overload_by_enforcing_dhe_key_exchange/","label":"www.reddit.com/r/netsec/comments/qdoosy/server_overload_by_enforcing_dhe_key_exchange/","hostname":"www.reddit.com","tags":["Issue Tracking"]},{"url":"https://github.com/mozilla/ssl-config-generator/issues/162","label":"github.com/mozilla/ssl-config-generator/issues/162","hostname":"github.com","tags":["Issue Tracking"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf","label":"cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf","hostname":"cert-portal.siemens.com","tags":["Third Party Advisory"]},{"url":"https://www.suse.com/support/kb/doc/?id=000020510","label":"www.suse.com/support/kb/doc/?id=000020510","hostname":"www.suse.com","tags":["Third Party Advisory"]},{"url":"https://www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/","label":"www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/","hostname":"www.openssl.org","tags":["Third Party Advisory"]},{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt","label":"www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-004.txt","hostname":"www.arubanetworks.com","tags":["Technical Description","Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K83120834","label":"support.f5.com/csp/article/K83120834","hostname":"support.f5.com","tags":["Third Party Advisory"]},{"url":"https://dheatattack.com","label":"dheatattack.com","hostname":"dheatattack.com","tags":["Third Party Advisory"]},{"url":"https://gitlab.com/dheatattack/dheater","label":"gitlab.com/dheatattack/dheater","hostname":"gitlab.com","tags":["Third Party Advisory"]},{"url":"https://dheatattack.gitlab.io/","label":"dheatattack.gitlab.io","hostname":"dheatattack.gitlab.io","tags":["Third Party Advisory"]},{"url":"https://ieeexplore.ieee.org/document/10374117","label":"ieeexplore.ieee.org/document/10374117","hostname":"ieeexplore.ieee.org","tags":["Technical Description","Third Party Advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2002-20001","label":"www.suse.com/security/cve/CVE-2002-20001","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-11-11T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-02-13T16:27:06.803Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":45,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:38:31.685Z","stale":false,"partial":false}}