CVE-2016-0736

What it actually does

mod_session_crypto encrypts session data using CBC or ECB modes without authenticated encryption, enabling padding oracle attacks that allow decryption of cookies.

Why it matters to the business

Attackers may decrypt session information to access user data or impersonate sessions across affected web server deployments; the moderate exploitation likelihood and presence in common Linux distributions raise ongoing operational risk despite the age of the issue.

How an attack unfolds

An attacker observes server responses to crafted ciphertexts, uses the padding oracle to decrypt session cookies byte by byte, and then replays or modifies decrypted session data to access protected resources.

How to fix it

Upgrade affected packages to the listed fixed versions (nova 2:17.0.0-1 on Debian 11/12/13 or nova 2:13.1.4-0ubuntu4.5+esm1 on Ubuntu Pro 16.04 LTS) and restart services; disable mod_session_crypto when not required.

How to confirm the fix worked

Confirm package versions match or exceed the fixed releases, review Apache configuration to ensure mod_session_crypto is either removed or uses authenticated encryption, and test session handling for proper integrity checks.

Typical attack path

1. Scan for hosts running vulnerable Apache HTTP Server versions with mod_session_crypto enabled
2. Send repeated requests with manipulated session cookies to trigger observable padding errors
3. Recover plaintext session data through iterative padding oracle queries
4. Forge valid session cookies to bypass authentication and access protected content

How to detect it

Examine Apache error and access logs for repeated decryption failures or anomalous cookie lengths; correlate with network traffic showing repeated requests to session endpoints from single sources.

What your security team should do

• Apply the exact package upgrades listed for each distribution without delay
• Audit all deployments for use of mod_session_crypto and disable where feasible
• Add monitoring rules for unusual session cookie patterns in web server logs
• Review downstream dependents for inherited exposure given ecosystem prevalence