CVE-2016-2105

EPSS 39.65%
Veröffentlicht 05.05.2016 01:59:01
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 64

NVD 61 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Enterprise Linux Desktop Version 6.0

Redhat ≫ Enterprise Linux Hpc Node Version 6

Redhat ≫ Enterprise Linux Server Version 6.0

Redhat ≫ Enterprise Linux Workstation Version 6.0

Opensuse ≫ Leap Version 42.1

Opensuse ≫ Opensuse Version 13.2

Oracle ≫ Mysql Version >= 5.6.0 <= 5.6.30

Oracle ≫ Mysql Version >= 5.7.0 <= 5.7.12

Redhat ≫ Enterprise Linux Desktop Version 7.0

Redhat ≫ Enterprise Linux Hpc Node Version 7.0

Redhat ≫ Enterprise Linux Hpc Node Eus Version 7.2

Redhat ≫ Enterprise Linux Server Version 7.0

Redhat ≫ Enterprise Linux Server Aus Version 7.2

Redhat ≫ Enterprise Linux Server Eus Version 7.2

Redhat ≫ Enterprise Linux Workstation Version 7.0

Apple ≫ macOS X Version 10.11.5

OpenSSL ≫ OpenSSL Version 1.0.1

OpenSSL ≫ OpenSSL Version 1.0.1 Update beta1

OpenSSL ≫ OpenSSL Version 1.0.1 Update beta2

OpenSSL ≫ OpenSSL Version 1.0.1 Update beta3

OpenSSL ≫ OpenSSL Version 1.0.1a

OpenSSL ≫ OpenSSL Version 1.0.1b

OpenSSL ≫ OpenSSL Version 1.0.1c

OpenSSL ≫ OpenSSL Version 1.0.1d

OpenSSL ≫ OpenSSL Version 1.0.1e

OpenSSL ≫ OpenSSL Version 1.0.1f

OpenSSL ≫ OpenSSL Version 1.0.1g

OpenSSL ≫ OpenSSL Version 1.0.1h

OpenSSL ≫ OpenSSL Version 1.0.1i

OpenSSL ≫ OpenSSL Version 1.0.1j

OpenSSL ≫ OpenSSL Version 1.0.1k

OpenSSL ≫ OpenSSL Version 1.0.1l

OpenSSL ≫ OpenSSL Version 1.0.1m

OpenSSL ≫ OpenSSL Version 1.0.1n

OpenSSL ≫ OpenSSL Version 1.0.1o

OpenSSL ≫ OpenSSL Version 1.0.1p

OpenSSL ≫ OpenSSL Version 1.0.1q

OpenSSL ≫ OpenSSL Version 1.0.1r

OpenSSL ≫ OpenSSL Version 1.0.1s

OpenSSL ≫ OpenSSL Version 1.0.2

OpenSSL ≫ OpenSSL Version 1.0.2 Update beta1

OpenSSL ≫ OpenSSL Version 1.0.2 Update beta2

OpenSSL ≫ OpenSSL Version 1.0.2 Update beta3

OpenSSL ≫ OpenSSL Version 1.0.2a

OpenSSL ≫ OpenSSL Version 1.0.2b

OpenSSL ≫ OpenSSL Version 1.0.2c

OpenSSL ≫ OpenSSL Version 1.0.2d

OpenSSL ≫ OpenSSL Version 1.0.2e

OpenSSL ≫ OpenSSL Version 1.0.2f

OpenSSL ≫ OpenSSL Version 1.0.2g

Debian ≫ Debian Linux Version 8.0

Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 15.10

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts

Nodejs ≫ Node.Js Version >= 0.10.0 < 0.10.45

Nodejs ≫ Node.Js Version >= 0.12.0 < 0.12.14

Nodejs ≫ Node.Js SwEdition - Version >= 4.0.0 <= 4.1.2

Nodejs ≫ Node.Js SwEdition lts Version >= 4.2.0 < 4.4.4

Nodejs ≫ Node.Js Version >= 5.0.0 < 5.11.1

Nodejs ≫ Node.Js Version 6.0.0 SwEdition -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	39.65%	0.984

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Vendor Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Patch

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Patch

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-2957.html

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Patch

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Patch

Vendor Advisory

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Patch

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Vendor Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-1650.html

Third Party Advisory

http://www.securityfocus.com/bid/91787

Third Party Advisory

VDB Entry

http://rhn.redhat.com/errata/RHSA-2016-2056.html

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Third Party Advisory

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html

Third Party Advisory

Mailing List

https://support.apple.com/HT206903

Third Party Advisory

https://www.tenable.com/security/tns-2016-18

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00018.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00029.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00030.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00036.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00055.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0722.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0996.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2073.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html

Third Party Advisory

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html

Third Party Advisory

Mailing List

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00001.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00008.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00010.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00011.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00013.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00014.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00016.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00019.html

Third Party Advisory

Mailing List

http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html

Third Party Advisory

VDB Entry

http://rhn.redhat.com/errata/RHSA-2016-1648.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1649.html

Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl

Third Party Advisory

http://www.debian.org/security/2016/dsa-3566

Third Party Advisory

http://www.securityfocus.com/bid/89757

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1035721

Third Party Advisory

VDB Entry

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103

Third Party Advisory

http://www.ubuntu.com/usn/USN-2959-1

Third Party Advisory

https://bto.bluecoat.com/security-advisory/sa123

Third Party Advisory

https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=5b814481f3573fa9677f3a31ee51322e2a22ee6a

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10160

Third Party Advisory

https://security.gentoo.org/glsa/201612-16

Third Party Advisory

https://security.netapp.com/advisory/ntap-20160504-0001/

Third Party Advisory

https://source.android.com/security/bulletin/pixel/2017-11-01

Third Party Advisory

https://www.freebsd.org/security/advisories/FreeBSD-SA-16:17.openssl.asc

Third Party Advisory

https://www.openssl.org/news/secadv/20160503.txt

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-2105

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-2105

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-2105

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-2105