Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3352
HistoryJan 27, 2017 - 8:16 a.m.

Buffer Overflow

2017-01-2708:16:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25

0.087 Low

EPSS

Percentile

94.6%

OpenSSL is vulnerable to buffer overflows. A malicious user can pass large amounts of input data to the EVP_EncodeUpdate function, which can cause a buffer overflow in the length check, allowing the malicious user to cause heap corruption.

References