Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

OSVersionArchitecturePackageVersionFilename
Alpine3.2-mainnoarchopenssl< 1.0.2h-r0UNKNOWN
Alpine3.3-mainnoarchopenssl< 1.0.2h-r0UNKNOWN
Alpine3.4-mainnoarchopenssl< 1.0.2h-r0UNKNOWN
Alpine3.5-mainnoarchopenssl< 1.0.2h-r0UNKNOWN
Alpine3.6-mainnoarchopenssl< 1.0.2h-r0UNKNOWN
Alpine3.7-mainnoarchopenssl< 1.0.2h-r0UNKNOWN
Alpine3.8-mainnoarchopenssl< 1.0.2h-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.2-main	noarch	openssl	< 1.0.2h-r0	UNKNOWN
Alpine	3.3-main	noarch	openssl	< 1.0.2h-r0	UNKNOWN
Alpine	3.4-main	noarch	openssl	< 1.0.2h-r0	UNKNOWN
Alpine	3.5-main	noarch	openssl	< 1.0.2h-r0	UNKNOWN
Alpine	3.6-main	noarch	openssl	< 1.0.2h-r0	UNKNOWN
Alpine	3.7-main	noarch	openssl	< 1.0.2h-r0	UNKNOWN
Alpine	3.8-main	noarch	openssl	< 1.0.2h-r0	UNKNOWN

nessus 47

osv 3

f5 4

cve 1

veracode 2

ubuntucve 1

debiancve 1

redhatcve 1

prion 1

hackerone 1

openssl 1

ibm 44

redhat 5

suse 14

mageia 1

openvas 38

fedora 5

oraclelinux 4

altlinux 5

amazon 1

paloalto 1

ubuntu 1

freebsd_advisory 1

cloudfoundry 1

aix 1

fortinet 1

archlinux 2

arista 1

huawei 1

debian 2

cisco 1

nodejsblog 1

freebsd 1

slackware 1

symantec 1

centos 2

nessus

F5 Networks BIG-IP : OpenSSL vulnerability (K51920288)

2016-11-15 00:00:00

Oracle Linux 5 : openssl (ELSA-2016-3576)

2016-06-22 00:00:00

RHEL 7 : JBoss Web Server (RHSA-2016:1648) (httpoxy)

2016-08-26 00:00:00

osv

CVE-2016-2105

2016-05-05 01:59:00

openssl - security update

2016-05-03 00:00:00

openssl - security update

2016-05-03 00:00:00

K51920288 : OpenSSL vulnerability CVE-2016-2105

2016-05-19 00:00:00

SOL51920288 - OpenSSL vulnerability CVE-2016-2105

2016-05-19 00:00:00

K07538415 : Multiple OpenSSL vulnerabilities

2016-05-04 00:00:00

cve

CVE-2016-2105

2016-05-05 01:59:00

veracode

Buffer Overflow

2019-01-15 09:12:57

Buffer Overflow

2017-01-27 08:16:53

ubuntucve

CVE-2016-2105

2016-05-03 00:00:00

debiancve

CVE-2016-2105

2016-05-05 01:59:00

redhatcve

CVE-2016-2105

2016-05-03 14:48:46

prion

Integer overflow

2016-05-05 01:59:00

hackerone

Internet Bug Bounty: EVP_EncodeUpdate overflow (CVE-2016-2105)

2016-05-03 11:41:07

openssl

Vulnerability in OpenSSL CVE-2016-2105

2016-05-03 00:00:00

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect IBM® SDK for Node.js™ (CVE-2016-2107, CVE-2016-2105)

2018-08-09 04:20:36

Security Bulletin: Multiple OpenSSL vulnerabilities in Node.js included in Rational Application Developer for WebSphere Software

2018-06-17 05:13:25

Security Bulletin: Multiple OpenSSL vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux

2018-08-03 04:23:43

redhat

(RHSA-2016:1649) Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 6

2016-08-22 17:56:20

(RHSA-2016:1648) Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 7

2016-08-22 17:55:39

(RHSA-2016:0722) Important: openssl security update

2016-05-09 04:44:04

suse

Security update for compat-openssl097g (important)

2016-05-04 18:08:19

Security update for openssl (important)

2016-05-12 20:08:02

Security update for openssl (important)

2016-05-04 18:09:44

mageia

Updated openssl packages fix security vulnerability

2016-05-08 00:22:48

openvas

Fedora Update for openssl FEDORA-2016-1411324654

2016-05-08 00:00:00

Mageia: Security Advisory (MGASA-2016-0169)

2016-05-09 00:00:00

Fedora Update for openssl FEDORA-2016-1

2016-05-11 00:00:00

fedora

[SECURITY] Fedora 24 Update: openssl-1.0.2h-1.fc24

2016-05-07 12:15:14

[SECURITY] Fedora 23 Update: openssl-1.0.2h-1.fc23

2016-05-04 18:54:36

[SECURITY] Fedora 22 Update: openssl-1.0.1k-15.fc22

2016-05-10 17:58:11

oraclelinux

openssl security update

2016-06-21 00:00:00

openssl security update

2016-05-09 00:00:00

openssl-fips security update

2016-06-15 00:00:00

altlinux

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2h-alt1

2016-05-03 00:00:00

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2h-alt1

2016-05-03 00:00:00

Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1

2016-05-04 00:00:00

amazon

Important: openssl

2016-05-03 10:30:00

paloalto

OpenSSL Vulnerabilities

2016-09-02 00:00:00

ubuntu

OpenSSL vulnerabilities

2016-05-03 00:00:00

freebsd_advisory

FreeBSD-SA-16:17.openssl

2016-05-04 00:00:00

cloudfoundry

USN-2959-1 OpenSSL vulnerabilities | Cloud Foundry

2016-05-06 00:00:00

aix

Vulnerabilities in OpenSSL affect AIX

2016-07-12 14:14:43

fortinet

OpenSSL Advisory - May 2016

2016-09-22 00:00:00

archlinux

openssl: multiple issues

2016-05-04 00:00:00

lib32-openssl: multiple issues

2016-05-04 00:00:00

arista

Security Advisory 0020

2016-05-06 00:00:00

huawei

Security Advisory - Multiple Vulnerabilities in OpenSSL in May 2016

2016-07-06 00:00:00

debian

[SECURITY] [DSA 3566-1] openssl security update

2016-05-03 18:24:21

[SECURITY] [DLA 456-1] openssl security update

2016-05-03 20:53:46

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016

2016-05-04 19:30:00

nodejsblog

OpenSSL updates, 1.0.1t and 1.0.2h

2016-05-02 00:00:00

freebsd

OpenSSL -- multiple vulnerabilities

2016-05-03 00:00:00

slackware

[slackware-security] openssl

2016-05-03 21:05:31

symantec

SA123 : OpenSSL Vulnerabilities 3-May-2016

2016-05-09 08:00:00

centos

openssl security update

2016-05-09 08:40:50

openssl security update

2016-05-16 10:25:52

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.087 Low

EPSS

Percentile

94.4%

JSON

Related for ALPINE:CVE-2016-2105