The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openssl | Aug 30, 2017 | May 5, 2016 | |
| Apple Osx Openssl | apple-osx-upgrade-latest | Nov 11, 2016 | May 4, 2016 | |
| Cisco Anyconnect | cisco-anyconnect-upgrade-latest | Dec 16, 2020 | May 5, 2016 | |
| Cisco Ise | cisco-ise-upgrade-latest | Oct 21, 2025 | May 4, 2016 | |
| Debian | debian-upgrade-openssl | May 4, 2016 | May 4, 2016 | |
| Freebsd | freebsd-upgrade-package-opensslfreebsd-upgrade-package-linux-c6-opensslfreebsd-upgrade-package-libresslfreebsd-upgrade-package-libressl-develfreebsd-upgrade-base-10_3-release-p2freebsd-upgrade-base-10_2-release-p16freebsd-upgrade-base-10_1-release-p33freebsd-upgrade-base-9_3-release-p41 | Dec 10, 2025 | May 3, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-openssl | Oct 30, 2017 | May 4, 2016 | |
| Http Openssl | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | openssl-upgrade-latest | May 5, 2016 | May 5, 2016 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openssl098e | Jun 17, 2020 | May 5, 2016 | |
| Ibm Aix | ibm-aix-openssl_advisory20 | Nov 30, 2017 | May 4, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-library-security-openssl-1-0-1-20-0-175-3-9-0-1-0oracle-solaris-11-3-upgrade-library-security-openssl-openssl-fips-140-2-0-6-0-175-3-9-0-1-0 | May 29, 2017 | May 4, 2016 | |
| Panos | palo-alto-networks-pan-os-upgrade-6-0palo-alto-networks-pan-os-upgrade-6-1palo-alto-networks-pan-os-upgrade-7-0palo-alto-networks-pan-os-upgrade-7-1 | Oct 11, 2016 | May 4, 2016 | |
| Pulse Secure Pulse Connect Secure | pulse-secure-pulse-connect-secure-upgrade-5_2r7pulse-secure-pulse-connect-secure-upgrade-7_4r13_7pulse-secure-pulse-connect-secure-upgrade-8_0r16pulse-secure-pulse-connect-secure-upgrade-8_1r10pulse-secure-pulse-connect-secure-upgrade-8_2r4pulse-secure-pulse-connect-secure-upgrade-8_2r5 | Oct 28, 2020 | May 5, 2016 | |
| Suse | — | suse-upgrade-libopenssl-1_0_0-develsuse-upgrade-libopenssl-1_1-develsuse-upgrade-libopenssl-1_1-devel-32bitsuse-upgrade-libopenssl-develsuse-upgrade-libopenssl10suse-upgrade-libopenssl1_0_0suse-upgrade-libopenssl1_0_0-32bitsuse-upgrade-libopenssl1_0_0-hmacsuse-upgrade-libopenssl1_0_0-hmac-32bitsuse-upgrade-libopenssl1_1suse-upgrade-libopenssl1_1-32bitsuse-upgrade-libopenssl1_1-hmacsuse-upgrade-libopenssl1_1-hmac-32bitsuse-upgrade-opensslsuse-upgrade-openssl-1_0_0suse-upgrade-openssl-1_0_0-docsuse-upgrade-openssl-1_1suse-upgrade-openssl-doc | Dec 9, 2016 | May 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub