Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-openssl | Aug 30, 2017 | Mar 3, 2016 |
| Amazon_linux | — | amazon-linux-upgrade-mysql56amazon-linux-upgrade-openssl | May 18, 2016 | Mar 3, 2016 |
| Centos_linux | — | centos-upgrade-java-1-8-0-ibmcentos-upgrade-java-1-8-0-ibm-democentos-upgrade-java-1-8-0-ibm-develcentos-upgrade-java-1-8-0-ibm-jdbccentos-upgrade-java-1-8-0-ibm-plugincentos-upgrade-java-1-8-0-ibm-src | Jul 6, 2016 | Mar 1, 2016 |
| Cisco Anyconnect | cisco-anyconnect-upgrade-latest | Dec 16, 2020 | Mar 3, 2016 | |
| Cisco Asa | cisco-asa-upgrade-9_0_4_41cisco-asa-upgrade-9_1_7_7cisco-asa-upgrade-9_2_4_11cisco-asa-upgrade-9_3_3_11cisco-asa-upgrade-9_4_3_2cisco-asa-upgrade-9_5_2_12cisco-asa-upgrade-9_6_1_99cisco-asa-upgrade-9_7_0_99 | Feb 9, 2017 | Mar 3, 2016 | |
| Debian | debian-upgrade-openssl | Mar 3, 2016 | Mar 1, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Mar 25, 2016 | |
| Freebsd | freebsd-upgrade-base-10_2-release-p13freebsd-upgrade-base-10_1-release-p30freebsd-upgrade-base-9_3-release-p38freebsd-upgrade-package-mariadb55-serverfreebsd-upgrade-package-mariadb100-serverfreebsd-upgrade-package-mariadb101-serverfreebsd-upgrade-package-mysql55-serverfreebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-percona55-serverfreebsd-upgrade-package-percona-serverfreebsd-upgrade-package-node | Dec 10, 2025 | Aug 11, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-openssl | Oct 30, 2017 | Mar 3, 2016 | |
| Hpsmh | — | hp-system-management-homepage-update-latest | Oct 26, 2016 | Mar 3, 2016 |
| Http Openssl | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | openssl-upgrade-latest | Mar 3, 2016 | Mar 3, 2016 |
| Ibm Aix | ibm-aix-openssl_advisory18 | Nov 30, 2017 | Mar 3, 2016 | |
| Ibm Java | — | ibm-java-upgrade-8_0_5_20 | Oct 5, 2018 | Mar 3, 2016 |
| Oracle Mysql | mysql-upgrade-1_0_1mysql-upgrade-1_0_2 | May 2, 2016 | Mar 3, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-security-openssl-1-0-1-19-0-175-3-7-0-1-0oracle-solaris-11-3-upgrade-library-security-openssl-openssl-fips-140-2-0-6-0-175-3-7-0-1-0 | May 29, 2017 | Mar 3, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-openssloracle-linux-upgrade-openssl-develoracle-linux-upgrade-openssl-libsoracle-linux-upgrade-openssl-perloracle-linux-upgrade-openssl-static | Mar 4, 2016 | Mar 3, 2016 |
| Pulse Secure Pulse Connect Secure | pulse-secure-pulse-connect-secure-upgrade-7_4r13_7pulse-secure-pulse-connect-secure-upgrade-8_0r16pulse-secure-pulse-connect-secure-upgrade-8_1r10pulse-secure-pulse-connect-secure-upgrade-8_2r3 | Oct 28, 2020 | Mar 3, 2016 | |
| Redhat_linux | — | redhat-upgrade-java-1-8-0-ibmredhat-upgrade-java-1-8-0-ibm-demoredhat-upgrade-java-1-8-0-ibm-develredhat-upgrade-java-1-8-0-ibm-jdbcredhat-upgrade-java-1-8-0-ibm-pluginredhat-upgrade-java-1-8-0-ibm-src | Sep 24, 2018 | Mar 3, 2016 |
| Suse | — | suse-upgrade-java-1_8_0-ibmsuse-upgrade-java-1_8_0-ibm-alsasuse-upgrade-java-1_8_0-ibm-develsuse-upgrade-java-1_8_0-ibm-pluginsuse-upgrade-libopenssl-1_0_0-develsuse-upgrade-libopenssl-1_1-develsuse-upgrade-libopenssl-1_1-devel-32bitsuse-upgrade-libopenssl-develsuse-upgrade-libopenssl0_9_8suse-upgrade-libopenssl0_9_8-32bitsuse-upgrade-libopenssl0_9_8-hmacsuse-upgrade-libopenssl0_9_8-hmac-32bitsuse-upgrade-libopenssl0_9_8-x86suse-upgrade-libopenssl1-develsuse-upgrade-libopenssl10suse-upgrade-libopenssl1_0_0suse-upgrade-libopenssl1_0_0-32bitsuse-upgrade-libopenssl1_0_0-hmacsuse-upgrade-libopenssl1_0_0-hmac-32bitsuse-upgrade-libopenssl1_0_0-x86suse-upgrade-libopenssl1_1suse-upgrade-libopenssl1_1-32bitsuse-upgrade-libopenssl1_1-hmacsuse-upgrade-libopenssl1_1-hmac-32bitsuse-upgrade-opensslsuse-upgrade-openssl-1_0_0suse-upgrade-openssl-1_0_0-docsuse-upgrade-openssl-1_1suse-upgrade-openssl-docsuse-upgrade-openssl1suse-upgrade-openssl1-docsuse-upgrade-sles11sp4-docker-imagesuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-image | Mar 1, 2016 | Mar 1, 2016 |
| Ubuntu | ubuntu-upgrade-libssl1-0-0 | Mar 3, 2016 | Mar 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub