CVE-2016-7798.yml

---
gem: openssl
cve: 2016-7798
ghsa: 6h88-qjpv-p32m
url: https://github.com/ruby/openssl/issues/49
title: Incorrect handling of initialization vector in the GCM mode in OpenSSL
date: 2017-10-24
description: |
  The openssl gem for Ruby uses the same initialization vector (IV) in
  GCM Mode (aes-*-gcm) when the IV is set before the key, which makes it easier for
  context-dependent attackers to bypass the encryption protection mechanism.
cvss_v2: 5.0
cvss_v3: 7.5
patched_versions:
  - ">= 2.0.0"