CVE-2016-2105

EPSS 39.65%
Veröffentlicht 05.05.2016 01:59:01
Zuletzt bearbeitet 06.05.2026 22:30:45
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 64

NVD 61 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Enterprise Linux Desktop Version6.0

Redhat ≫ Enterprise Linux Hpc Node Version6

Redhat ≫ Enterprise Linux Server Version6.0

Redhat ≫ Enterprise Linux Workstation Version6.0

Opensuse ≫ Leap Version42.1

Opensuse ≫ Opensuse Version13.2

Oracle ≫ Mysql Version >= 5.6.0 <= 5.6.30

Oracle ≫ Mysql Version >= 5.7.0 <= 5.7.12

Redhat ≫ Enterprise Linux Desktop Version7.0

Redhat ≫ Enterprise Linux Hpc Node Version7.0

Redhat ≫ Enterprise Linux Hpc Node Eus Version7.2

Redhat ≫ Enterprise Linux Server Version7.0

Redhat ≫ Enterprise Linux Server Aus Version7.2

Redhat ≫ Enterprise Linux Server Eus Version7.2

Redhat ≫ Enterprise Linux Workstation Version7.0

Apple ≫ macOS X Version10.11.5

OpenSSL ≫ OpenSSL Version1.0.1

OpenSSL ≫ OpenSSL Version1.0.1 Updatebeta1

OpenSSL ≫ OpenSSL Version1.0.1 Updatebeta2

OpenSSL ≫ OpenSSL Version1.0.1 Updatebeta3

OpenSSL ≫ OpenSSL Version1.0.1a

OpenSSL ≫ OpenSSL Version1.0.1b

OpenSSL ≫ OpenSSL Version1.0.1c

OpenSSL ≫ OpenSSL Version1.0.1d

OpenSSL ≫ OpenSSL Version1.0.1e

OpenSSL ≫ OpenSSL Version1.0.1f

OpenSSL ≫ OpenSSL Version1.0.1g

OpenSSL ≫ OpenSSL Version1.0.1h

OpenSSL ≫ OpenSSL Version1.0.1i

OpenSSL ≫ OpenSSL Version1.0.1j

OpenSSL ≫ OpenSSL Version1.0.1k

OpenSSL ≫ OpenSSL Version1.0.1l

OpenSSL ≫ OpenSSL Version1.0.1m

OpenSSL ≫ OpenSSL Version1.0.1n

OpenSSL ≫ OpenSSL Version1.0.1o

OpenSSL ≫ OpenSSL Version1.0.1p

OpenSSL ≫ OpenSSL Version1.0.1q

OpenSSL ≫ OpenSSL Version1.0.1r

OpenSSL ≫ OpenSSL Version1.0.1s

OpenSSL ≫ OpenSSL Version1.0.2

OpenSSL ≫ OpenSSL Version1.0.2 Updatebeta1

OpenSSL ≫ OpenSSL Version1.0.2 Updatebeta2

OpenSSL ≫ OpenSSL Version1.0.2 Updatebeta3

OpenSSL ≫ OpenSSL Version1.0.2a

OpenSSL ≫ OpenSSL Version1.0.2b

OpenSSL ≫ OpenSSL Version1.0.2c

OpenSSL ≫ OpenSSL Version1.0.2d

OpenSSL ≫ OpenSSL Version1.0.2e

OpenSSL ≫ OpenSSL Version1.0.2f

OpenSSL ≫ OpenSSL Version1.0.2g

Debian ≫ Debian Linux Version8.0

Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version15.10

Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts

Nodejs ≫ Node.Js Version >= 0.10.0 < 0.10.45

Nodejs ≫ Node.Js Version >= 0.12.0 < 0.12.14

Nodejs ≫ Node.Js SwEdition- Version >= 4.0.0 <= 4.1.2

Nodejs ≫ Node.Js SwEditionlts Version >= 4.2.0 < 4.4.4

Nodejs ≫ Node.Js Version >= 5.0.0 < 5.11.1

Nodejs ≫ Node.Js Version6.0.0 SwEdition-

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	39.65%	0.984

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Vendor Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Patch

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Patch

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-2957.html

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Patch

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Patch

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Patch

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-1650.html

Third Party Advisory

http://www.securityfocus.com/bid/91787

Third Party Advisory

VDB Entry

http://rhn.redhat.com/errata/RHSA-2016-2056.html

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Third Party Advisory

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html

Third Party Advisory

Mailing List

https://support.apple.com/HT206903

Third Party Advisory

https://www.tenable.com/security/tns-2016-18

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0722.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0996.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2073.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html

Third Party Advisory

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html

Third Party Advisory

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html

Third Party Advisory

Mailing List

http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html

Third Party Advisory

VDB Entry

http://rhn.redhat.com/errata/RHSA-2016-1648.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1649.html

Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl

Third Party Advisory

http://www.debian.org/security/2016/dsa-3566

Third Party Advisory

http://www.securityfocus.com/bid/89757

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1035721

Third Party Advisory

VDB Entry

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103

Third Party Advisory

http://www.ubuntu.com/usn/USN-2959-1

Third Party Advisory

https://bto.bluecoat.com/security-advisory/sa123

Third Party Advisory

https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=5b814481f3573fa9677f3a31ee51322e2a22ee6a

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10160

Third Party Advisory

https://security.gentoo.org/glsa/201612-16

Third Party Advisory

https://security.netapp.com/advisory/ntap-20160504-0001/

Third Party Advisory

https://source.android.com/security/bulletin/pixel/2017-11-01

Third Party Advisory

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc

Third Party Advisory

https://www.openssl.org/news/secadv/20160503.txt

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-2105

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-2105

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-2105

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-2105