NetSight
IP …
high7.5

CVE-2016-0797

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption o…

Impact

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.

Affected products

VendorProductAffected versions
OpensslOpenssl
Versions 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e
NodejsNode.Js
from 4.0.0 before 4.1.2
from 4.2.0 before 4.3.2
from 5.0.0 before 5.7.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10
DebianDebian Linux
Versions 7.0, 8.0

References