CVE-2016-0799

CRITICAL

OpenSSL 1.0.1-1.0.1r and 1.0.2-1.0.2f - Denial of Service via fmtstr Function

Title source: llm
STIX 2.1

Description

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.

References (59)

Core 59
Core References
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/83755
Vendor Advisory vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-2073.html
Third Party Advisory vendor-advisory
http://www.debian.org/security/2016/dsa-3500
Vendor Advisory vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-0996.html
Third Party Advisory, VDB Entry vdb-entry
http://www.securityfocus.com/bid/91787
Vendor Advisory vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.html
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/201603-15
Vendor Advisory vendor-advisory
http://rhn.redhat.com/errata/RHSA-2016-0722.html
Vendor Advisory vendor-advisory
http://www.ubuntu.com/usn/USN-2914-1
Third Party Advisory, VDB Entry vdb-entry
http://www.securitytracker.com/id/1035133

Scores

CVSS v3 9.8
EPSS 0.4354
EPSS Percentile 97.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (28)
openssl/openssl 1.0.1 (4 CPE variants)
openssl/openssl 1.0.1a
openssl/openssl 1.0.1b
openssl/openssl 1.0.1c
openssl/openssl 1.0.1d
openssl/openssl 1.0.1e
openssl/openssl 1.0.1f
openssl/openssl 1.0.1g
openssl/openssl 1.0.1h
openssl/openssl 1.0.1i
... and 18 more
Published Mar 03, 2016
Tracked Since Feb 18, 2026