Lucene search
Alpine Linux Development TeamALPINE:CVE-2016-2180HistoryAug 01, 2016 - 2:59 a.m.
CVE-2016-2180
2016-08-0102:59:11
Alpine Linux Development Team
security.alpinelinux.org
19
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.4
Confidence
High
EPSS
0.206
Percentile
96.4%
The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the “openssl ts” command.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.2-main | noarch | openssl | < 1.0.2h-r2 | UNKNOWN |
| Alpine | 3.3-main | noarch | openssl | < 1.0.2h-r2 | UNKNOWN |
| Alpine | 3.4-main | noarch | openssl | < 1.0.2h-r2 | UNKNOWN |
| Alpine | 3.5-main | noarch | openssl | < 1.0.2h-r2 | UNKNOWN |
| Alpine | 3.6-main | noarch | openssl | < 1.0.2h-r2 | UNKNOWN |
| Alpine | 3.7-main | noarch | openssl | < 1.0.2h-r2 | UNKNOWN |
| Alpine | 3.8-main | noarch | openssl | < 1.0.2h-r2 | UNKNOWN |
Related
veracode
veracode
Denial Of Service (DoS)
2017-01-26 07:02:59
ubuntucve
ubuntucve
CVE-2016-2180
2016-07-31 00:00:00
ibm
ibm
redhatcve
redhatcve
CVE-2016-2180
2016-07-25 07:18:18
hackerone
hackerone
Internet Bug Bounty: OOB read in TS_OBJ_print_bio() (CVE-2016-2180)
2017-04-18 07:38:28
cvelist
cvelist
CVE-2016-2180
2016-08-01 00:00:00
debiancve
debiancve
CVE-2016-2180
2016-08-01 02:59:11
openssl
openssl
Vulnerability in OpenSSL CVE-2016-2180
2016-07-22 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K02652550)
2016-11-15 00:00:00
Oracle Linux 6 / 7 : openssl (ELSA-2016-3621)
2023-09-07 00:00:00
EulerOS 2.0 SP1 : openssl (EulerOS-SA-2016-1047)
2017-05-01 00:00:00
f5
f5
K02652550 : OpenSSL vulnerability CVE-2016-2180
2016-11-14 00:00:00
SOL02652550 - OpenSSL vulnerability CVE-2016-2180
2016-11-14 00:00:00
SOL22071504 - September 2016 OpenSSL security vulnerability announcement
2016-09-22 00:00:00
osv
osv
CVE-2016-2180
2016-08-01 02:59:00
openssl - security update
2016-09-25 00:00:00
openssl - security update
2016-09-22 00:00:00
prion
prion
Out-of-bounds
2016-08-01 02:59:00
cve
cve
CVE-2016-2180
2016-08-01 02:59:11
nvd
nvd
CVE-2016-2180
2016-08-01 02:59:11
openvas
openvas
Juniper Networks Junos OS Multiple OpenSSL Vulnerabilities
2016-10-14 00:00:00
OpenSSL 1.0.2 and 1.0.1 Multiple Vulnerabilities (Sep 2016) - Windows
2016-09-26 00:00:00
OpenSSL 1.0.2 and 1.0.1 Multiple Vulnerabilities (Sep 2016) - Linux
2016-09-26 00:00:00
amazon
amazon
Medium: openssl
2016-10-12 17:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: openssl-1.0.2j-1.fc24
2016-09-28 01:57:16
[SECURITY] Fedora 25 Update: openssl-1.0.2j-1.fc25
2016-10-09 03:28:42
[SECURITY] Fedora 23 Update: openssl-1.0.2j-1.fc23
2016-10-11 23:24:05
oraclelinux
oraclelinux
openssl security update
2016-09-27 00:00:00
openssl security update
2016-09-27 00:00:00
openssl security update
2021-04-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2i-alt1
2016-09-22 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2i-alt1
2016-09-22 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.2i-alt1
2016-09-22 00:00:00
centos
centos
openssl security update
2016-09-28 14:48:04
redhat
redhat
(RHSA-2016:1940) Important: openssl security update
2016-09-27 11:50:45
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:26.openssl
2016-09-23 00:00:00
cloudfoundry
cloudfoundry
USN-3087-2 OpenSSL Regression | Cloud Foundry
2016-09-28 00:00:00
suse
suse
Security update for openssl (important)
2016-09-27 11:09:12
Security update for openssl (important)
2016-09-27 19:11:34
Security update for openssl1 (important)
2016-10-06 20:11:44
debian
debian
[SECURITY] [DLA 637-1] openssl security update
2016-09-25 11:55:01
[SECURITY] [DSA 3673-1] openssl security update
2016-09-22 16:50:14
archlinux
archlinux
[ASA-201609-24] lib32-openssl: multiple issues
2016-09-26 00:00:00
[ASA-201609-23] openssl: multiple issues
2016-09-26 00:00:00
ubuntu
ubuntu
OpenSSL regression
2016-09-23 00:00:00
OpenSSL vulnerabilities
2016-09-22 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2016-10-12 01:12:20
Updated virtualbox packages fixes security vulnerabilities
2016-12-06 00:49:27
aix
aix
Vulnerabilities in OpenSSL affect AIX
2016-11-14 13:29:26
arista
arista
Security Advisory 0024
2016-10-04 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-12-07 00:00:00
fortinet
fortinet
OpenSSL Security Advisory [22 Sept 2016]
2017-04-03 00:00:00
slackware
slackware
[slackware-security] openssl
2016-09-22 18:53:12
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2016-09-22 00:00:00
symantec
symantec
SA132 : OpenSSL Vulnerabilities 22-Sep-2016 and 26-Sep-2016
2016-10-06 08:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016
2016-09-27 22:40:00
huawei
huawei
Security Advisory - Sixteen OpenSSL Vulnerabilities on Some Huawei products
2017-03-22 00:00:00
nodejsblog
nodejsblog
Security updates for all active release lines, September 2016
2016-09-23 00:00:00
packetstorm
packetstorm
Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle
2017-07-14 00:00:00
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.4
Confidence
High
EPSS
0.206
Percentile
96.4%
Related for ALPINE:CVE-2016-2180