The function TS_OBJ_print_bio() misuses OBJ_obj2txt(): the return value is the total length the OID text representation would use and not the amount of data written. This will result in OOB reads when large OIDs are presented.

veracode 1

ubuntucve 1

ibm 53

nessus 43

f5 3

hackerone 1

redhatcve 1

alpinelinux 1

debiancve 1

osv 4

prion 1

cve 1

openvas 32

amazon 1

fedora 3

oraclelinux 5

altlinux 5

centos 1

cloudfoundry 1

freebsd_advisory 1

redhat 1

suse 8

debian 2

archlinux 2

ubuntu 2

mageia 2

aix 1

arista 1

gentoo 1

freebsd 1

fortinet 1

slackware 1

symantec 1

cisco 1

huawei 1

nodejsblog 1

packetstorm 1

kitploit 1

ics 1

oracle 7

veracode

Denial Of Service (DoS)

2017-01-26 07:02:59

ubuntucve

CVE-2016-2180

2016-07-31 00:00:00

ibm

Security Bulletin: IBM b-type SAN switches and directors affected by Open Source OpenSSL Vulnerabilities (CVE-2016-2180).

2023-05-30 17:20:48

Security Bulletin: IBM Cisco SAN switches and directors are vulnerable to OpenSSL denial of service (CVE-2016-2180).

2022-04-11 15:07:09

Security Bulletin: Vulnerability in OpenSSL affect Rational Tau (CVE-2016-2180)

2018-06-17 05:17:27

nessus

F5 Networks BIG-IP : OpenSSL vulnerability (K02652550)

2016-11-15 00:00:00

Oracle Linux 6 / 7 : openssl (ELSA-2016-3621)

2023-09-07 00:00:00

Amazon Linux AMI : openssl (ALAS-2016-755)

2016-10-13 00:00:00

K02652550 : OpenSSL vulnerability CVE-2016-2180

2016-11-14 00:00:00

SOL02652550 - OpenSSL vulnerability CVE-2016-2180

2016-11-14 00:00:00

SOL22071504 - September 2016 OpenSSL security vulnerability announcement

2016-09-22 00:00:00

hackerone

Internet Bug Bounty: OOB read in TS_OBJ_print_bio() (CVE-2016-2180)

2017-04-18 07:38:28

redhatcve

CVE-2016-2180

2016-07-25 07:18:18

alpinelinux

CVE-2016-2180

2016-08-01 02:59:00

debiancve

CVE-2016-2180

2016-08-01 02:59:00

osv

CVE-2016-2180

2016-08-01 02:59:00

openssl - security update

2016-09-25 00:00:00

openssl - regression update

2016-09-22 00:00:00

prion

Out-of-bounds

2016-08-01 02:59:00

cve

CVE-2016-2180

2016-08-01 02:59:00

openvas

Juniper Networks Junos OS Multiple OpenSSL Vulnerabilities

2016-10-14 00:00:00

OpenSSL 1.0.2 and 1.0.1 Multiple Vulnerabilities (Sep 2016) - Linux

2016-09-26 00:00:00

OpenSSL 1.0.2 and 1.0.1 Multiple Vulnerabilities (Sep 2016) - Windows

2016-09-26 00:00:00

amazon

Medium: openssl

2016-10-12 17:00:00

fedora

[SECURITY] Fedora 24 Update: openssl-1.0.2j-1.fc24

2016-09-28 01:57:16

[SECURITY] Fedora 23 Update: openssl-1.0.2j-1.fc23

2016-10-11 23:24:05

[SECURITY] Fedora 25 Update: openssl-1.0.2j-1.fc25

2016-10-09 03:28:42

oraclelinux

openssl security update

2016-09-27 00:00:00

openssl security update

2016-09-27 00:00:00

openssl security update

2021-04-01 00:00:00

altlinux

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2i-alt1

2016-09-22 00:00:00

Security fix for the ALT Linux 8 package openssl10 version 1.0.2i-alt1

2016-09-22 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2i-alt1

2016-09-22 00:00:00

centos

openssl security update

2016-09-28 14:48:04

cloudfoundry

USN-3087-2 OpenSSL Regression | Cloud Foundry

2016-09-28 00:00:00

freebsd_advisory

FreeBSD-SA-16:26.openssl

2016-09-23 00:00:00

redhat

(RHSA-2016:1940) Important: openssl security update

2016-09-27 11:50:45

suse

Security update for openssl (important)

2016-09-27 11:09:12

Security update for openssl (important)

2016-09-27 19:11:34

Security update for openssl1 (important)

2016-10-06 20:11:44

debian

[SECURITY] [DLA 637-1] openssl security update

2016-09-25 11:55:01

[SECURITY] [DSA 3673-1] openssl security update

2016-09-22 16:50:14

archlinux

[ASA-201609-24] lib32-openssl: multiple issues

2016-09-26 00:00:00

[ASA-201609-23] openssl: multiple issues

2016-09-26 00:00:00

ubuntu

OpenSSL vulnerabilities

2016-09-22 00:00:00

OpenSSL regression

2016-09-23 00:00:00

mageia

Updated openssl packages fix security vulnerabilities

2016-10-12 01:12:20

Updated virtualbox packages fixes security vulnerabilities

2016-12-06 00:49:27

aix

Vulnerabilities in OpenSSL affect AIX

2016-11-14 13:29:26

arista

Security Advisory 0024

2016-10-04 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2016-12-07 00:00:00

freebsd

OpenSSL -- multiple vulnerabilities

2016-09-22 00:00:00

fortinet

OpenSSL Security Advisory [22 Sept 2016]

2017-04-03 00:00:00

slackware

[slackware-security] openssl

2016-09-22 18:53:12

symantec

SA132 : OpenSSL Vulnerabilities 22-Sep-2016 and 26-Sep-2016

2016-10-06 08:00:00

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016

2016-09-27 22:40:00

huawei

Security Advisory - Sixteen OpenSSL Vulnerabilities on Some Huawei products

2017-03-22 00:00:00

nodejsblog

Security updates for all active release lines, September 2016

2016-09-23 00:00:00

packetstorm

Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle

2017-07-14 00:00:00

kitploit

arch-audit - An utility like pkg-audit for Arch Linux

2016-10-15 14:30:00

ics

Siemens SCALANCE X-200RNA Switch Devices

2022-12-19 12:00:00

oracle

Oracle Critical Patch Update - April 2018

2018-04-17 00:00:00

Oracle Critical Patch Update - January 2018

2018-01-16 00:00:00

Oracle Critical Patch Update - October 2016

2016-10-18 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
OpenSource

@2024 Vulners Inc

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.217 Low

EPSS

Percentile

96.4%

JSON

Related for OPENSSL:CVE-2016-2180