Cloudanix VulnDB

CVE-2016-2842

Critical · 9.8

CVSS

9.8

EPSS

53.7%

Published

Mar 3, 2016

CISA due date

—

The record

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 openssl 0 1.0.2g-1
Debian:12 openssl 0 1.0.2g-1
Debian:13 openssl 0 1.0.2g-1
Debian:7 openssl 0 1.0.1e-2+deb7u20
Debian:8 openssl 0 1.0.1k-3+deb8u4
Red Hat:enterprise_linux:6::client openssl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::client openssl-debuginfo 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::client openssl-devel 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::client openssl-perl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::client openssl-static 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::computenode openssl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::computenode openssl-debuginfo 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::computenode openssl-devel 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::computenode openssl-perl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::computenode openssl-static 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::server openssl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::server openssl-debuginfo 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::server openssl-devel 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::server openssl-perl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::server openssl-static 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::workstation openssl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::workstation openssl-debuginfo 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::workstation openssl-devel 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::workstation openssl-perl 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:6::workstation openssl-static 0 0:1.0.1e-48.el6_8.1
Red Hat:enterprise_linux:7::client openssl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::client openssl-debuginfo 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::client openssl-devel 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::client openssl-libs 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::client openssl-perl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::client openssl-static 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::computenode openssl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::computenode openssl-debuginfo 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::computenode openssl-devel 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::computenode openssl-libs 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::computenode openssl-perl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::computenode openssl-static 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::server openssl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::server openssl-debuginfo 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::server openssl-devel 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::server openssl-libs 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::server openssl-perl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::server openssl-static 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::workstation openssl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::workstation openssl-debuginfo 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::workstation openssl-devel 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::workstation openssl-libs 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::workstation openssl-perl 0 1:1.0.1e-51.el7_2.5
Red Hat:enterprise_linux:7::workstation openssl-static 0 1:1.0.1e-51.el7_2.5
Red Hat:rhel_eus:6.7::computenode openssl 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::computenode openssl-debuginfo 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::computenode openssl-devel 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::computenode openssl-perl 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::computenode openssl-static 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::server openssl 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::server openssl-debuginfo 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::server openssl-devel 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::server openssl-perl 0 0:1.0.1e-42.el6_7.5
Red Hat:rhel_eus:6.7::server openssl-static 0 0:1.0.1e-42.el6_7.5
Ubuntu:14.04:LTS openssl 0 1.0.1f-1ubuntu2.18
Ubuntu:16.04:LTS openssl 0 1.0.2g-1ubuntu2

Related vulnerabilities