NetSight
IP …
critical9.8

CVE-2016-0705

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attack…

Impact

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.

Affected products

VendorProductAffected versions
OracleMysql
from 5.6.0 through 5.6.29
from 5.7.0 through 5.7.11
OpensslOpenssl
Versions 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e
GoogleAndroid
Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10
DebianDebian Linux
Versions 7.0, 8.0

References