3 matches found
OpenSSL EVP_EncodeUpdate Buffer Overflow DoS
The vulnerability of the EVPEncodeUpdate function crypto/evp/evpenc.c in the OpenSSL library is related to an error in processing numbers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
PT-2016-3308
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1t and 1.0.2h MySQL Server versions 5.6.30 and earlier, 5.7.12 and earlier Description The issue is related to an integer overflow in the EVP EncodeUpdate function in OpenSSL, which can cause a denial of service o...
PT-2016-3310
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1t OpenSSL versions prior to 1.0.2h Description The issue is related to the asn1 d2i read bio function in the ASN.1 BIO implementation, which allows remote attackers to cause a denial of service due to memory...