Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb
Debian11allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb
Debian999allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb
Debian13allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb
Debian	11	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb
Debian	999	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb
Debian	13	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb

ubuntucve 1

nessus 47

veracode 2

f5 4

prion 1

openssl 1

hackerone 1

redhatcve 1

nvd 1

cvelist 1

cve 1

alpinelinux 1

osv 3

ibm 44

fedora 5

openvas 37

oraclelinux 4

redhat 5

mageia 1

suse 14

altlinux 5

cloudfoundry 1

aix 1

paloalto 1

ubuntu 1

freebsd_advisory 1

amazon 1

archlinux 2

fortinet 1

arista 1

huawei 1

freebsd 1

debian 2

slackware 1

cisco 1

symantec 1

centos 2

ubuntucve

CVE-2016-2105

2016-05-03 00:00:00

nessus

F5 Networks BIG-IP : OpenSSL vulnerability (K51920288)

2016-11-15 00:00:00

RHEL 7 : JBoss Web Server (RHSA-2016:1648) (httpoxy)

2016-08-26 00:00:00

Oracle Linux 5 : openssl (ELSA-2016-3576)

2016-06-22 00:00:00

veracode

Buffer Overflow

2017-01-27 08:16:53

Buffer Overflow

2019-01-15 09:12:57

SOL51920288 - OpenSSL vulnerability CVE-2016-2105

2016-05-19 00:00:00

K51920288 : OpenSSL vulnerability CVE-2016-2105

2016-05-19 00:00:00

SOL07538415 - Multiple OpenSSL vulnerabilities

2016-05-03 00:00:00

prion

Integer overflow

2016-05-05 01:59:00

openssl

Vulnerability in OpenSSL CVE-2016-2105

2016-05-03 00:00:00

hackerone

Internet Bug Bounty: EVP_EncodeUpdate overflow (CVE-2016-2105)

2016-05-03 11:41:07

redhatcve

CVE-2016-2105

2016-05-03 14:48:46

nvd

CVE-2016-2105

2016-05-05 01:59:01

cvelist

CVE-2016-2105

2016-05-05 00:00:00

cve

CVE-2016-2105

2016-05-05 01:59:01

alpinelinux

CVE-2016-2105

2016-05-05 01:59:01

osv

CVE-2016-2105

2016-05-05 01:59:00

openssl - security update

2016-05-03 00:00:00

openssl - security update

2016-05-03 00:00:00

ibm

Security Bulletin: OpenSSL vulnerabilities in Node.js found on May 03, 2016 affect Rational Software Architect and Rational Software Architect for WebSphere Software (CVE-2016-2107, CVE-2016-2105)

2020-09-10 15:49:00

Security Bulletin: Vulnerabilities in OpenSSL affect IBM® SDK for Node.js™ (CVE-2016-2107, CVE-2016-2105)

2018-08-09 04:20:36

Security Bulletin: Multiple OpenSSL vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux

2018-08-03 04:23:43

fedora

[SECURITY] Fedora 22 Update: openssl-1.0.1k-15.fc22

2016-05-10 17:58:11

[SECURITY] Fedora 23 Update: openssl-1.0.2h-1.fc23

2016-05-04 18:54:36

[SECURITY] Fedora 24 Update: openssl-1.0.2h-1.fc24

2016-05-07 12:15:14

openvas

Fedora Update for openssl FEDORA-2016-05

2016-05-05 00:00:00

Fedora Update for openssl FEDORA-2016-1

2016-05-11 00:00:00

Fedora Update for openssl FEDORA-2016-1411324654

2016-05-08 00:00:00

oraclelinux

openssl security update

2016-06-21 00:00:00

openssl security update

2016-05-09 00:00:00

openssl security update

2016-05-13 00:00:00

redhat

(RHSA-2016:1648) Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 7

2016-08-22 17:55:39

(RHSA-2016:1649) Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 6

2016-08-22 17:56:20

(RHSA-2016:0996) Important: openssl security update

2016-05-10 07:00:21

mageia

Updated openssl packages fix security vulnerability

2016-05-08 00:22:48

suse

Security update for compat-openssl097g (important)

2016-05-04 18:08:19

Security update for openssl (important)

2016-05-04 18:09:44

Security update for openssl (important)

2016-05-12 20:08:02

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1

2016-05-04 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 1.0.2h-alt1

2016-05-03 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1t-alt0.M70P.1

2016-05-04 00:00:00

cloudfoundry

USN-2959-1 OpenSSL vulnerabilities | Cloud Foundry

2016-05-06 00:00:00

aix

Vulnerabilities in OpenSSL affect AIX

2016-07-12 14:14:43

paloalto

OpenSSL Vulnerabilities

2016-09-02 00:00:00

ubuntu

OpenSSL vulnerabilities

2016-05-03 00:00:00

freebsd_advisory

FreeBSD-SA-16:17.openssl

2016-05-04 00:00:00

amazon

Important: openssl

2016-05-03 10:30:00

archlinux

openssl: multiple issues

2016-05-04 00:00:00

lib32-openssl: multiple issues

2016-05-04 00:00:00

fortinet

OpenSSL Advisory - May 2016

2016-09-22 00:00:00

arista

Security Advisory 0020

2016-05-06 00:00:00

huawei

Security Advisory - Multiple Vulnerabilities in OpenSSL in May 2016

2016-07-06 00:00:00

freebsd

OpenSSL -- multiple vulnerabilities

2016-05-03 00:00:00

debian

[SECURITY] [DLA 456-1] openssl security update

2016-05-03 20:53:46

[SECURITY] [DSA 3566-1] openssl security update

2016-05-03 18:24:21

slackware

[slackware-security] openssl

2016-05-03 21:05:31

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016

2016-05-04 19:30:00

symantec

SA123 : OpenSSL Vulnerabilities 3-May-2016

2016-05-09 08:00:00

centos

openssl security update

2016-05-16 10:25:52

openssl security update

2016-05-09 08:40:50

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.087

Percentile

94.5%

JSON

Related for DEBIANCVE:CVE-2016-2105