The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory19 | — | — | Aug 5, 2016 | Mar 3, 2016 |
| Aix 6.1 Openssl_advisory19 | — | — | Aug 5, 2016 | Mar 3, 2016 |
| Aix 7.1 Openssl_advisory19 | — | — | Aug 5, 2016 | Mar 3, 2016 |
| Aix 7.2 Openssl_advisory19 | — | — | Aug 5, 2016 | Mar 3, 2016 |
| Amazon_linux | — | Upgrade openssl | Sep 19, 2018 | Mar 3, 2016 |
| Centos_linux | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-develUpgrade openssl-staticUpgrade openssl-perl | Jul 6, 2016 | Mar 3, 2016 |
| Debian | — | Upgrade openssl | Mar 14, 2016 | Mar 1, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 27, 2016 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 26, 2016 | Mar 3, 2016 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 5, 2026 | Mar 3, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl098e | Nov 19, 2019 | Mar 3, 2016 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory19 | Nov 30, 2017 | Mar 3, 2016 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.1.19-0.175.3.7.0.1.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.6-0.175.3.7.0.1.0 on Solaris 11.3 | May 29, 2017 | Mar 3, 2016 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-fips-develUpgrade openssl-perlUpgrade openssl-fips-perlUpgrade openssl-fipsUpgrade opensslUpgrade openssl-staticUpgrade openssl-fips-staticUpgrade openssl-devel | May 9, 2016 | Mar 3, 2016 |
| Panos | — | Update PAN-OS 7.1 to the latest workaround for your deviceUpgrade PAN-OS 7.0 to the latest versionUpdate PAN-OS 6.0 to the latest workaround for your deviceUpdate PAN-OS 6.1 to the latest workaround for your device | Oct 11, 2016 | Mar 3, 2016 |
| Redhat_linux | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl-perlUpgrade opensslUpgrade openssl-debuginfoUpgrade openssl-staticNo solution exists | Oct 6, 2017 | Mar 3, 2016 |
| Ubuntu | — | Upgrade openssl | Nov 19, 2024 | Mar 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub