NetSight
IP …
critical9.8

CVE-2016-2177

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (in…

Impact

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.

Affected products

VendorProductAffected versions
HpIcewall Mcrp
Version 3.0
HpIcewall Sso
Version 10.0
HpIcewall Sso Agent Option
Version 10.0
OpensslOpenssl
Versions 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e
OracleLinux
Versions 5, 6, 7
OracleSolaris
Versions 10, 11.3

Weakness classification

CWE-190

References