Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 1 min 160 bronnen 42 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2016-2105

HIGH · 7.5 CVSS Gepubliceerd: CWE-190

Beschrijving

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

Vendors

Redhat Opensuse Oracle Apple Openssl Debian Canonical Nodejs

Affected products

Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Server Enterprise Linux Workstation Leap Opensuse Mysql Enterprise Linux Hpc Node Eus Enterprise Linux Server Aus Enterprise Linux Server Eus Mac Os X Openssl Debian Linux Ubuntu Linux Node.js

References