Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 3 min 161 bronnen 47 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-2108

CRITICAL · 9.8 CVSS Gepubliceerd: CWE-119

Beschrijving

The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue.

Vendors

Redhat Openssl Google

Affected products

Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Workstation Openssl Enterprise Linux Hpc Node Eus Enterprise Linux Server Aus Enterprise Linux Server Eus Android

References