CVE-2016-7055

🗓️ 04 May 2017 20:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 221 Views

There is a carry propagating bug in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c, allowing for possible attacks on specific input lengths

Reporter	Title	Published	Views	Family All 179
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in OpenSSL shipped with IBM Tivoli Network Manager IP Edition(CVE-2016-7055, CVE-2017-3731, CVE-2017-3732)	17 Jun 201815:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect Rational Reporting for Development Intelligence	17 Jun 201805:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest (CVE-2016-7055, CVE-2017-3731)	4 Feb 202016:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM® SDK for Node.js™ (CVE-2017-3731 CVE-2017-3732 CVE-2016-7055)	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearCase (CVE-2016-7055, CVE-2017-3731)	10 Jul 201808:34	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects MegaRAID Storage Manager (CVE-2016-7055)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Master Data Management is vulnerable to multiple OpenSSL vulnerabilities (CVE-2016-7055, CVE-2017-3730, CVE-2017-3731, CVE-2017-3732)	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Cloud Manager	8 Aug 201804:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter systems (CVE-2016-7055)	14 Apr 202314:32	–	ibm

NVD

Node

openssl opensslRange1.0.2–1.0.2k

openssl opensslRange1.1.0–1.1.0c

Node

nodejs node.jsRange4.0.0–4.1.2-

nodejs node.jsRange4.2.0–4.7.3lts

nodejs node.jsRange6.0.0–6.8.1-

nodejs node.jsRange6.9.0–6.9.5lts

nodejs node.jsRange7.0.0–7.5.0-

Source	Link
security	www.security.freebsd.org/advisories/FreeBSD-SA-17:02.openssl.asc
access	www.access.redhat.com/errata/RHSA-2018:2187
h20566	www.h20566.www2.hpe.com/hpsc/doc/public/display
access	www.access.redhat.com/errata/RHSA-2018:2186
tenable	www.tenable.com/security/tns-2017-04
securityfocus	www.securityfocus.com/bid/94242
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
access	www.access.redhat.com/errata/RHSA-2018:2185
oracle	www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
openssl	www.openssl.org/news/secadv/20161110.txt

13 May 2026 00:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 22.6

CVSS 3.15.9

EPSS0.02693