What’s Vulnerable › Vulnerabilities

CVE-2016-10259

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-04-11 · updated 2026-06-17
• Weakness: CWE-399

Description

Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-of-service vulnerability that impacts the SSL servers for intercepted SSL connections. A malicious SSL client can, under certain circumstances, temporarily exhaust the TCP connection pool of an SSL server.

Affected products

• Bluecoat Ssl Visibility Appliance Sv1800 Firmware: 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2 (+1)
• Bluecoat Ssl Visibility Appliance Sv2800 Firmware: 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2 (+1)
• Bluecoat Ssl Visibility Appliance Sv3800 Firmware: 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2 (+1)
• Bluecoat Ssl Visibility Appliance Sv800 Firmware: 3.8.4, 3.9, 3.10, 3.11, 3.11.1.1, 3.11.1.2 (+1)

References

• http://www.securityfocus.com/bid/97525
• https://bto.bluecoat.com/security-advisory/sa142
• https://www.symantec.com/security-center/network-protection-security-advisories/SA142
• http://www.securityfocus.com/bid/97525
• https://bto.bluecoat.com/security-advisory/sa142
• https://www.symantec.com/security-center/network-protection-security-advisories/SA142

Get alerted when CVE-2016-10259 or the next vulnerability affects your stack