CVE-2016-2176

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-2176
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2176.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-2176
Downstream
ALPINE (1)
BELL (1)
openSUSE (3)
SUSE (1)
Related
openSUSE (3)
SUSE (1)
Published
2016-05-05T01:59:06Z
Modified
2026-10-20T10:47:26Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
Summary
[none]
Details

The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
e818b74be2170fbe957a07b0da4401c2b694b3b8
Last Affected
2c5db8dac3a06fe5b2c889838a606138ee3542ed
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "1.0.1s"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2"
                },
                {
                    "last_affected":  "1.0.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2a"
                },
                {
                    "last_affected":  "1.0.2a"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2b"
                },
                {
                    "last_affected":  "1.0.2b"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2c"
                },
                {
                    "last_affected":  "1.0.2c"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2d"
                },
                {
                    "last_affected":  "1.0.2d"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2e"
                },
                {
                    "last_affected":  "1.0.2e"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2f"
                },
                {
                    "last_affected":  "1.0.2f"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2g"
                },
                {
                    "last_affected":  "1.0.2g"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2-beta1"
                },
                {
                    "last_affected":  "1.0.2-beta1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2-beta2"
                },
                {
                    "last_affected":  "1.0.2-beta2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.2-beta3"
                },
                {
                    "last_affected":  "1.0.2-beta3"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.0.2
1.0.2-beta1
1.0.2-beta2
1.0.2-beta3
Other
OpenSSL_1_0_1
OpenSSL_1_0_1-beta1
OpenSSL_1_0_1-beta2
OpenSSL_1_0_1-beta3
OpenSSL_1_0_1-post-auto-reformat
OpenSSL_1_0_1-post-reformat
OpenSSL_1_0_1-pre-auto-reformat
OpenSSL_1_0_1-pre-reformat
OpenSSL_1_0_1a
OpenSSL_1_0_1b
OpenSSL_1_0_1c
OpenSSL_1_0_1d
OpenSSL_1_0_1e
OpenSSL_1_0_1f
OpenSSL_1_0_1g
OpenSSL_1_0_1h
OpenSSL_1_0_1i
OpenSSL_1_0_1j
OpenSSL_1_0_1k
OpenSSL_1_0_1l
OpenSSL_1_0_1m
OpenSSL_1_0_1n
OpenSSL_1_0_1o
OpenSSL_1_0_1p
OpenSSL_1_0_1q
OpenSSL_1_0_1r
OpenSSL_1_0_1s
OpenSSL_1_0_1t
OpenSSL_1_0_1u
OpenSSL_1_0_2-beta1
OpenSSL_1_0_2-beta2
OpenSSL_1_0_2-beta3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2176.json"