Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

OSVersionArchitecturePackageVersionFilename
Debian12allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb
Debian11allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb
Debian999allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb
Debian13allopenssl< 1.0.2h-1openssl_1.0.2h-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb
Debian	11	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb
Debian	999	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb
Debian	13	all	openssl	< 1.0.2h-1	openssl_1.0.2h-1_all.deb

nvd 1

f5 4

openssl 1

ubuntucve 1

prion 1

cve 1

cvelist 1

nessus 46

veracode 1

osv 3

alpinelinux 1

hackerone 1

redhatcve 1

ibm 45

openvas 38

fedora 5

redhat 5

suse 14

mageia 1

oraclelinux 4

aix 1

cloudfoundry 1

altlinux 5

amazon 1

ubuntu 1

freebsd_advisory 1

paloalto 1

arista 1

archlinux 2

fortinet 1

huawei 1

debian 2

cisco 1

slackware 1

freebsd 1

symantec 1

centos 2

nvd

CVE-2016-2106

2016-05-05 01:59:02

SOL36488941 - OpenSSL vulnerability CVE-2016-2106

2016-05-19 00:00:00

K36488941 : OpenSSL vulnerability CVE-2016-2106

2016-05-19 00:00:00

SOL07538415 - Multiple OpenSSL vulnerabilities

2016-05-03 00:00:00

openssl

Vulnerability in OpenSSL CVE-2016-2106

2016-05-03 00:00:00

ubuntucve

CVE-2016-2106

2016-05-03 00:00:00

prion

Integer overflow

2016-05-05 01:59:00

cve

CVE-2016-2106

2016-05-05 01:59:02

cvelist

CVE-2016-2106

2016-05-05 00:00:00

nessus

F5 Networks BIG-IP : OpenSSL vulnerability (K36488941)

2016-11-21 00:00:00

EulerOS 2.0 SP3 : openssl098e (EulerOS-SA-2019-2271)

2019-11-08 00:00:00

RHEL 7 : JBoss Web Server (RHSA-2016:1648) (httpoxy)

2016-08-26 00:00:00

veracode

Buffer Overflow

2017-01-27 05:17:12

osv

CVE-2016-2106

2016-05-05 01:59:00

openssl - security update

2016-05-03 00:00:00

openssl - security update

2016-05-03 00:00:00

alpinelinux

CVE-2016-2106

2016-05-05 01:59:02

hackerone

Internet Bug Bounty: EVP_EncryptUpdate overflow (CVE-2016-2106)

2016-05-03 11:41:39

redhatcve

CVE-2016-2106

2016-05-03 14:48:56

ibm

Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere MQ (CVE-2016-2106, CVE-2016-2109)

2018-06-15 07:07:04

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Aspera Enterprise Server, IBM Aspera Connect Server, IBM Aspera Point to Point Client, IBM Aspera Desktop Client and IBM Aspera Connect Browser Plugin (CVE-2016-2106, CVE-2016-2109, CVE-2016-2176)

2018-06-15 07:08:32

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Aspera Enterprise Server, IBM Aspera Connect Server, IBM Aspera Point to Point Client, IBM A

2018-12-08 04:55:34

openvas

Huawei EulerOS: Security Advisory for openssl098e (EulerOS-SA-2019-2271)

2020-01-23 00:00:00

Fedora Update for openssl FEDORA-2016-05

2016-05-05 00:00:00

Fedora Update for openssl FEDORA-2016-1411324654

2016-05-08 00:00:00

fedora

[SECURITY] Fedora 22 Update: openssl-1.0.1k-15.fc22

2016-05-10 17:58:11

[SECURITY] Fedora 23 Update: openssl-1.0.2h-1.fc23

2016-05-04 18:54:36

[SECURITY] Fedora 24 Update: openssl-1.0.2h-1.fc24

2016-05-07 12:15:14

redhat

(RHSA-2016:1648) Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 7

2016-08-22 17:55:39

(RHSA-2016:1649) Important: Red Hat JBoss Web Server 2.1.1 security update on RHEL 6

2016-08-22 17:56:20

(RHSA-2016:0722) Important: openssl security update

2016-05-09 04:44:04

suse

Security update for compat-openssl097g (important)

2016-05-04 18:08:19

Security update for openssl (important)

2016-05-12 20:08:02

Security update for openssl (important)

2016-05-04 18:09:44

mageia

Updated openssl packages fix security vulnerability

2016-05-08 00:22:48

oraclelinux

openssl security update

2016-06-21 00:00:00

openssl security update

2016-05-09 00:00:00

openssl security update

2016-05-13 00:00:00

aix

Vulnerabilities in OpenSSL affect AIX

2016-07-12 14:14:43

cloudfoundry

USN-2959-1 OpenSSL vulnerabilities | Cloud Foundry

2016-05-06 00:00:00

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1

2016-05-04 00:00:00

Security fix for the ALT Linux 7 package openssl10 version 1.0.1t-alt0.M70P.1

2016-05-04 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 1.0.2h-alt1

2016-05-03 00:00:00

amazon

Important: openssl

2016-05-03 10:30:00

ubuntu

OpenSSL vulnerabilities

2016-05-03 00:00:00

freebsd_advisory

FreeBSD-SA-16:17.openssl

2016-05-04 00:00:00

paloalto

OpenSSL Vulnerabilities

2016-09-02 00:00:00

arista

Security Advisory 0020

2016-05-06 00:00:00

archlinux

openssl: multiple issues

2016-05-04 00:00:00

lib32-openssl: multiple issues

2016-05-04 00:00:00

fortinet

OpenSSL Advisory - May 2016

2016-09-22 00:00:00

huawei

Security Advisory - Multiple Vulnerabilities in OpenSSL in May 2016

2016-07-06 00:00:00

debian

[SECURITY] [DSA 3566-1] openssl security update

2016-05-03 18:24:21

[SECURITY] [DLA 456-1] openssl security update

2016-05-03 20:53:46

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016

2016-05-04 19:30:00

slackware

[slackware-security] openssl

2016-05-03 21:05:31

freebsd

OpenSSL -- multiple vulnerabilities

2016-05-03 00:00:00

symantec

SA123 : OpenSSL Vulnerabilities 3-May-2016

2016-05-09 08:00:00

centos

openssl security update

2016-05-16 10:25:52

openssl security update

2016-05-09 08:40:50

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.328 Low

EPSS

Percentile

97.1%

JSON

Related for DEBIANCVE:CVE-2016-2106