Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openssl | Aug 30, 2017 | May 5, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-openssl | May 3, 2016 | May 3, 2016 |
| Apple Osx Openssl | apple-osx-upgrade-latest | Nov 11, 2016 | May 4, 2016 | |
| Centos_linux | — | centos-upgrade-opensslcentos-upgrade-openssl-develcentos-upgrade-openssl-libscentos-upgrade-openssl-perlcentos-upgrade-openssl-static | Jul 6, 2016 | May 4, 2016 |
| Cisco Anyconnect | cisco-anyconnect-upgrade-latest | Dec 16, 2020 | May 5, 2016 | |
| Cisco Ise | cisco-ise-upgrade-latest | Oct 21, 2025 | May 4, 2016 | |
| Debian | debian-upgrade-openssl | May 3, 2016 | May 3, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 19, 2016 | |
| Freebsd | freebsd-upgrade-package-opensslfreebsd-upgrade-package-linux-c6-opensslfreebsd-upgrade-package-libresslfreebsd-upgrade-package-libressl-develfreebsd-upgrade-base-10_3-release-p2freebsd-upgrade-base-10_2-release-p16freebsd-upgrade-base-10_1-release-p33freebsd-upgrade-base-9_3-release-p41 | Dec 10, 2025 | May 3, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-openssl | Oct 30, 2017 | May 4, 2016 | |
| Hpsmh | — | hp-system-management-homepage-update-latest | Oct 27, 2016 | May 4, 2016 |
| Http Openssl | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | openssl-upgrade-latest | May 5, 2016 | May 5, 2016 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openssl098e | Sep 12, 2019 | May 5, 2016 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-openssl098e | Nov 19, 2019 | May 5, 2016 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-openssl098e | Nov 19, 2019 | May 5, 2016 | |
| Ibm Aix | ibm-aix-openssl_advisory20 | Nov 30, 2017 | May 4, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-database-mysql-55-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-55-client-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-55-library-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-55-tests-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-client-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-library-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-tests-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-57-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-client-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-embedded-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-library-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-tests-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-library-security-openssl-1-0-1-20-0-175-3-9-0-1-0oracle-solaris-11-3-upgrade-library-security-openssl-openssl-fips-140-2-0-6-0-175-3-9-0-1-0oracle-solaris-11-3-upgrade-runtime-perl-512-5-12-5-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-runtime-perl-threaded-512-5-12-5-0-175-3-19-0-2-0 | May 29, 2017 | May 4, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-openssloracle-linux-upgrade-openssl-develoracle-linux-upgrade-openssl-fipsoracle-linux-upgrade-openssl-fips-develoracle-linux-upgrade-openssl-fips-perloracle-linux-upgrade-openssl-fips-staticoracle-linux-upgrade-openssl-libsoracle-linux-upgrade-openssl-perloracle-linux-upgrade-openssl-static | May 9, 2016 | May 3, 2016 |
| Panos | palo-alto-networks-pan-os-upgrade-6-0palo-alto-networks-pan-os-upgrade-6-1palo-alto-networks-pan-os-upgrade-7-0palo-alto-networks-pan-os-upgrade-7-1 | Oct 11, 2016 | May 4, 2016 | |
| Pulse Secure Pulse Connect Secure | pulse-secure-pulse-connect-secure-upgrade-5_2r7pulse-secure-pulse-connect-secure-upgrade-7_4r13_7pulse-secure-pulse-connect-secure-upgrade-8_0r16pulse-secure-pulse-connect-secure-upgrade-8_1r10pulse-secure-pulse-connect-secure-upgrade-8_2r4pulse-secure-pulse-connect-secure-upgrade-8_2r5 | Oct 28, 2020 | May 5, 2016 | |
| Red Hat Jboss Eap | red-hat-jboss-eap-upgrade-latest | Sep 19, 2024 | May 3, 2016 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-opensslredhat-upgrade-openssl-debuginforedhat-upgrade-openssl-develredhat-upgrade-openssl-libsredhat-upgrade-openssl-perlredhat-upgrade-openssl-static | Oct 6, 2017 | May 4, 2016 | |
| Suse | — | suse-upgrade-compat-openssl097gsuse-upgrade-compat-openssl097g-32bitsuse-upgrade-libopenssl-1_0_0-develsuse-upgrade-libopenssl-1_1-develsuse-upgrade-libopenssl-1_1-devel-32bitsuse-upgrade-libopenssl-develsuse-upgrade-libopenssl-devel-32bitsuse-upgrade-libopenssl0_9_8suse-upgrade-libopenssl0_9_8-32bitsuse-upgrade-libopenssl0_9_8-hmacsuse-upgrade-libopenssl0_9_8-hmac-32bitsuse-upgrade-libopenssl0_9_8-x86suse-upgrade-libopenssl1-develsuse-upgrade-libopenssl10suse-upgrade-libopenssl1_0_0suse-upgrade-libopenssl1_0_0-32bitsuse-upgrade-libopenssl1_0_0-hmacsuse-upgrade-libopenssl1_0_0-hmac-32bitsuse-upgrade-libopenssl1_0_0-x86suse-upgrade-libopenssl1_1suse-upgrade-libopenssl1_1-32bitsuse-upgrade-libopenssl1_1-hmacsuse-upgrade-libopenssl1_1-hmac-32bitsuse-upgrade-opensslsuse-upgrade-openssl-1_0_0suse-upgrade-openssl-1_0_0-docsuse-upgrade-openssl-1_1suse-upgrade-openssl-docsuse-upgrade-openssl1suse-upgrade-openssl1-docsuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-image | May 3, 2016 | May 3, 2016 |
| Ubuntu | ubuntu-upgrade-libssl1-0-0 | May 3, 2016 | May 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub