NetSight
IP …
high7.5

CVE-2016-2105

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a de…

Impact

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Hpc Node
Versions 6, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2
OracleMysql
from 5.6.0 through 5.6.30
from 5.7.0 through 5.7.12
RedhatEnterprise Linux Hpc Node Eus
Version 7.2
RedhatEnterprise Linux Server Aus
Version 7.2
RedhatEnterprise Linux Server Eus
Version 7.2
AppleMac Os X
Version 10.11.5
OpensslOpenssl
Versions 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e

Weakness classification

CWE-190

References