The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openssl | Aug 30, 2017 | May 5, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-openssl | May 3, 2016 | May 3, 2016 |
| Apple Osx Libressl | apple-osx-upgrade-latest | Nov 11, 2016 | May 4, 2016 | |
| Apple Osx Openssl | apple-osx-upgrade-latest | Nov 11, 2016 | May 4, 2016 | |
| Centos_linux | — | centos-upgrade-opensslcentos-upgrade-openssl-develcentos-upgrade-openssl-libscentos-upgrade-openssl-perlcentos-upgrade-openssl-static | Jul 6, 2016 | May 4, 2016 |
| Cisco Anyconnect | cisco-anyconnect-upgrade-latest | Dec 16, 2020 | May 5, 2016 | |
| Cisco Asa | cisco-asa-upgrade-9_0_4_41cisco-asa-upgrade-9_1_7_7cisco-asa-upgrade-9_2_4_11cisco-asa-upgrade-9_3_3_11cisco-asa-upgrade-9_4_3_2cisco-asa-upgrade-9_5_2_12cisco-asa-upgrade-9_6_1_99cisco-asa-upgrade-9_7_0_99 | Feb 9, 2017 | May 4, 2016 | |
| Cisco Ise | cisco-ise-upgrade-latest | Oct 21, 2025 | May 4, 2016 | |
| Debian | debian-upgrade-openssl | May 3, 2016 | May 3, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 7, 2016 | |
| Freebsd | freebsd-upgrade-package-opensslfreebsd-upgrade-package-linux-c6-opensslfreebsd-upgrade-package-libresslfreebsd-upgrade-package-libressl-develfreebsd-upgrade-base-10_3-release-p2freebsd-upgrade-base-10_2-release-p16freebsd-upgrade-base-10_1-release-p33freebsd-upgrade-base-9_3-release-p41 | Dec 10, 2025 | May 3, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-openssl | Oct 30, 2017 | May 4, 2016 | |
| Hpsmh | — | hp-system-management-homepage-update-latest | Oct 27, 2016 | May 4, 2016 |
| Http Openssl | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | openssl-upgrade-latest | May 5, 2016 | May 5, 2016 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openssl098e | Sep 12, 2019 | May 5, 2016 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-openssl098e | Nov 19, 2019 | May 5, 2016 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-openssl098e | Nov 19, 2019 | May 5, 2016 | |
| Ibm Aix | ibm-aix-openssl_advisory20 | Nov 30, 2017 | May 4, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-security-openssl-1-0-1-20-0-175-3-9-0-1-0oracle-solaris-11-3-upgrade-library-security-openssl-openssl-fips-140-2-0-6-0-175-3-9-0-1-0 | May 29, 2017 | May 4, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-openssloracle-linux-upgrade-openssl-develoracle-linux-upgrade-openssl-fipsoracle-linux-upgrade-openssl-fips-develoracle-linux-upgrade-openssl-fips-perloracle-linux-upgrade-openssl-fips-staticoracle-linux-upgrade-openssl-libsoracle-linux-upgrade-openssl-perloracle-linux-upgrade-openssl-static | May 9, 2016 | Apr 23, 2016 |
| Panos | palo-alto-networks-pan-os-upgrade-6-0palo-alto-networks-pan-os-upgrade-6-1palo-alto-networks-pan-os-upgrade-7-0palo-alto-networks-pan-os-upgrade-7-1 | Oct 12, 2016 | May 4, 2016 | |
| Pulse Secure Pulse Connect Secure | pulse-secure-pulse-connect-secure-upgrade-5_2r7pulse-secure-pulse-connect-secure-upgrade-7_4r13_7pulse-secure-pulse-connect-secure-upgrade-8_0r16pulse-secure-pulse-connect-secure-upgrade-8_1r10pulse-secure-pulse-connect-secure-upgrade-8_2r4pulse-secure-pulse-connect-secure-upgrade-8_2r5 | Oct 28, 2020 | May 5, 2016 | |
| Red Hat Jboss Eap | red-hat-jboss-eap-upgrade-latest | Sep 19, 2024 | Apr 23, 2016 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-opensslredhat-upgrade-openssl-debuginforedhat-upgrade-openssl-develredhat-upgrade-openssl-libsredhat-upgrade-openssl-perlredhat-upgrade-openssl-static | Oct 6, 2017 | May 4, 2016 | |
| Suse | — | suse-upgrade-compat-openssl097gsuse-upgrade-compat-openssl097g-32bitsuse-upgrade-libopenssl-1_0_0-develsuse-upgrade-libopenssl-1_1-develsuse-upgrade-libopenssl-1_1-devel-32bitsuse-upgrade-libopenssl-develsuse-upgrade-libopenssl-devel-32bitsuse-upgrade-libopenssl0_9_8suse-upgrade-libopenssl0_9_8-32bitsuse-upgrade-libopenssl0_9_8-hmacsuse-upgrade-libopenssl0_9_8-hmac-32bitsuse-upgrade-libopenssl0_9_8-x86suse-upgrade-libopenssl1-develsuse-upgrade-libopenssl10suse-upgrade-libopenssl1_0_0suse-upgrade-libopenssl1_0_0-32bitsuse-upgrade-libopenssl1_0_0-hmacsuse-upgrade-libopenssl1_0_0-hmac-32bitsuse-upgrade-libopenssl1_0_0-x86suse-upgrade-libopenssl1_1suse-upgrade-libopenssl1_1-32bitsuse-upgrade-libopenssl1_1-hmacsuse-upgrade-libopenssl1_1-hmac-32bitsuse-upgrade-opensslsuse-upgrade-openssl-1_0_0suse-upgrade-openssl-1_0_0-docsuse-upgrade-openssl-1_1suse-upgrade-openssl-docsuse-upgrade-openssl1suse-upgrade-openssl1-docsuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-image | May 3, 2016 | May 3, 2016 |
| Ubuntu | ubuntu-upgrade-libssl1-0-0 | May 3, 2016 | May 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub