CVE-2016-2180

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-2180
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2180.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-2180
Downstream
Related
Published
2016-08-01T02:59:11.120Z
Modified
2026-04-01T23:36:28.178860Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The TSOBJprintbio function in crypto/ts/tslib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
543e15a3c0139e6026ce194f8c8465fb9a559986
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe707c3260cb44f5e7d701cf87e1197712ec7d43
Fixed
0ed26acce328ec16a3aa635f1ca37365e8c7403a
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1a"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1b"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1c"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1d"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1e"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1f"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1g"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1h"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1i"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1j"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1k"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1l"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1m"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1n"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1o"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1p"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1q"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1r"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1s"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1t"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2a"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2b"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2c"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2d"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2e"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2f"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2g"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2h"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7"
        }
    ]
}

Affected versions

Other
AFTER_COMPAQ_PATCH
BEFORE_COMPAQ_PATCH
BEFORE_engine
BEN_FIPS_TEST_1
BEN_FIPS_TEST_2
BEN_FIPS_TEST_3
BEN_FIPS_TEST_4
BEN_FIPS_TEST_5
BEN_FIPS_TEST_6
BEN_FIPS_TEST_7
FIPS_098_TEST_1
FIPS_098_TEST_2
FIPS_098_TEST_3
FIPS_098_TEST_4
FIPS_098_TEST_5
FIPS_098_TEST_6
FIPS_098_TEST_7
FIPS_098_TEST_8
LEVITTE_after_const
LEVITTE_before_const
OpenSSL-engine-0_9_6
OpenSSL-engine-0_9_6-beta1
OpenSSL-engine-0_9_6-beta2
OpenSSL-engine-0_9_6-beta3
OpenSSL-engine-0_9_6a
OpenSSL-engine-0_9_6a-beta1
OpenSSL-engine-0_9_6a-beta2
OpenSSL-engine-0_9_6a-beta3
OpenSSL-engine-0_9_6b
OpenSSL-engine-0_9_6c
OpenSSL-engine-0_9_6d
OpenSSL-engine-0_9_6d-beta1
OpenSSL-engine-0_9_6e
OpenSSL-engine-0_9_6f
OpenSSL-engine-0_9_6g
OpenSSL-engine-0_9_6h
OpenSSL-engine-0_9_6i
OpenSSL-engine-0_9_6j
OpenSSL-engine-0_9_6k
OpenSSL-engine-0_9_6l
OpenSSL-engine-0_9_6m
OpenSSL-fips-1_2_0
OpenSSL-fips-1_2_1
OpenSSL-fips-1_2_2
OpenSSL-fips-1_2_3
OpenSSL-fips-2_0
OpenSSL-fips-2_0-pl1
OpenSSL-fips-2_0-rc1
OpenSSL-fips-2_0-rc2
OpenSSL-fips-2_0-rc3
OpenSSL-fips-2_0-rc4
OpenSSL-fips-2_0-rc5
OpenSSL-fips-2_0-rc6
OpenSSL-fips-2_0-rc7
OpenSSL-fips-2_0-rc8
OpenSSL-fips-2_0-rc9
OpenSSL-fips-2_0_1
OpenSSL-fips-2_0_10
OpenSSL-fips-2_0_11
OpenSSL-fips-2_0_12
OpenSSL-fips-2_0_13
OpenSSL-fips-2_0_14
OpenSSL-fips-2_0_15
OpenSSL-fips-2_0_16
OpenSSL-fips-2_0_2
OpenSSL-fips-2_0_3
OpenSSL-fips-2_0_4
OpenSSL-fips-2_0_5
OpenSSL-fips-2_0_6
OpenSSL-fips-2_0_7
OpenSSL-fips-2_0_8
OpenSSL-fips-2_0_9
OpenSSL_0_9_1c
OpenSSL_0_9_2b
OpenSSL_0_9_3
OpenSSL_0_9_3a
OpenSSL_0_9_3beta1
OpenSSL_0_9_3beta2
OpenSSL_0_9_4
OpenSSL_0_9_5
OpenSSL_0_9_5a
OpenSSL_0_9_5a-beta1
OpenSSL_0_9_5a-beta2
OpenSSL_0_9_5beta1
OpenSSL_0_9_5beta2
OpenSSL_0_9_6
OpenSSL_0_9_6-beta1
OpenSSL_0_9_6-beta2
OpenSSL_0_9_6-beta3
OpenSSL_0_9_6a
OpenSSL_0_9_6a-beta1
OpenSSL_0_9_6a-beta2
OpenSSL_0_9_6a-beta3
OpenSSL_0_9_6b
OpenSSL_0_9_6c
OpenSSL_0_9_6d
OpenSSL_0_9_6d-beta1
OpenSSL_0_9_6e
OpenSSL_0_9_6f
OpenSSL_0_9_6g
OpenSSL_0_9_6h
OpenSSL_0_9_6i
OpenSSL_0_9_6j
OpenSSL_0_9_6k
OpenSSL_0_9_6l
OpenSSL_0_9_6m
OpenSSL_0_9_7
OpenSSL_0_9_7-beta1
OpenSSL_0_9_7-beta2
OpenSSL_0_9_7-beta3
OpenSSL_0_9_7-beta4
OpenSSL_0_9_7-beta5
OpenSSL_0_9_7-beta6
OpenSSL_0_9_7a
OpenSSL_0_9_7b
OpenSSL_0_9_7c
OpenSSL_0_9_7d
OpenSSL_0_9_7e
OpenSSL_0_9_8
OpenSSL_0_9_8-beta1
OpenSSL_0_9_8-beta2
OpenSSL_0_9_8-beta3
OpenSSL_0_9_8-beta4
OpenSSL_0_9_8-beta5
OpenSSL_0_9_8-beta6
OpenSSL_0_9_8-post-auto-reformat
OpenSSL_0_9_8-post-reformat
OpenSSL_0_9_8-pre-auto-reformat
OpenSSL_0_9_8-pre-reformat
OpenSSL_0_9_8a
OpenSSL_0_9_8b
OpenSSL_0_9_8c
OpenSSL_0_9_8d
OpenSSL_0_9_8e
OpenSSL_0_9_8f
OpenSSL_0_9_8g
OpenSSL_0_9_8h
OpenSSL_0_9_8i
OpenSSL_0_9_8j
OpenSSL_0_9_8k
OpenSSL_0_9_8l
OpenSSL_0_9_8m
OpenSSL_0_9_8m-beta1
OpenSSL_0_9_8n
OpenSSL_0_9_8o
OpenSSL_0_9_8p
OpenSSL_0_9_8q
OpenSSL_0_9_8r
OpenSSL_0_9_8s
OpenSSL_0_9_8t
OpenSSL_0_9_8u
OpenSSL_0_9_8v
OpenSSL_0_9_8w
OpenSSL_0_9_8x
OpenSSL_0_9_8y
OpenSSL_0_9_8za
OpenSSL_0_9_8zb
OpenSSL_0_9_8zc
OpenSSL_0_9_8zd
OpenSSL_0_9_8ze
OpenSSL_0_9_8zf
OpenSSL_0_9_8zg
OpenSSL_0_9_8zh
OpenSSL_1_0_0
OpenSSL_1_0_0-beta1
OpenSSL_1_0_0-beta2
OpenSSL_1_0_0-beta3
OpenSSL_1_0_0-beta4
OpenSSL_1_0_0-beta5
OpenSSL_1_0_0-post-auto-reformat
OpenSSL_1_0_0-post-reformat
OpenSSL_1_0_0-pre-auto-reformat
OpenSSL_1_0_0-pre-reformat
OpenSSL_1_0_0a
OpenSSL_1_0_0b
OpenSSL_1_0_0c
OpenSSL_1_0_0d
OpenSSL_1_0_0e
OpenSSL_1_0_0f
OpenSSL_1_0_0g
OpenSSL_1_0_0h
OpenSSL_1_0_0i
OpenSSL_1_0_0j
OpenSSL_1_0_0k
OpenSSL_1_0_0l
OpenSSL_1_0_0m
OpenSSL_1_0_0n
OpenSSL_1_0_0o
OpenSSL_1_0_0p
OpenSSL_1_0_0q
OpenSSL_1_0_0r
OpenSSL_1_0_0s
OpenSSL_1_0_0t
OpenSSL_1_0_1
OpenSSL_1_0_1-beta1
OpenSSL_1_0_1-beta2
OpenSSL_1_0_1-beta3
OpenSSL_1_0_1-post-auto-reformat
OpenSSL_1_0_1-post-reformat
OpenSSL_1_0_1-pre-auto-reformat
OpenSSL_1_0_1-pre-reformat
OpenSSL_1_0_1a
OpenSSL_1_0_1b
OpenSSL_1_0_1c
OpenSSL_1_0_1d
OpenSSL_1_0_1e
OpenSSL_1_0_1f
OpenSSL_1_0_1g
OpenSSL_1_0_1h
OpenSSL_1_0_1i
OpenSSL_1_0_1j
OpenSSL_1_0_1k
OpenSSL_1_0_1l
OpenSSL_1_0_1m
OpenSSL_1_0_1n
OpenSSL_1_0_1o
OpenSSL_1_0_1p
OpenSSL_1_0_1q
OpenSSL_1_0_1r
OpenSSL_1_0_1s
OpenSSL_1_0_1t
OpenSSL_1_0_1u
OpenSSL_1_0_2
OpenSSL_1_0_2-beta1
OpenSSL_1_0_2-beta2
OpenSSL_1_0_2-beta3
OpenSSL_1_0_2-post-auto-reformat
OpenSSL_1_0_2-post-reformat
OpenSSL_1_0_2-pre-auto-reformat
OpenSSL_1_0_2-pre-reformat
OpenSSL_1_0_2a
OpenSSL_1_0_2b
OpenSSL_1_0_2c
OpenSSL_1_0_2d
OpenSSL_1_0_2e
OpenSSL_1_0_2f
OpenSSL_1_0_2g
OpenSSL_1_0_2h
OpenSSL_1_0_2i
OpenSSL_1_0_2j
OpenSSL_1_0_2k
OpenSSL_1_0_2l
OpenSSL_1_0_2m
OpenSSL_1_0_2n
OpenSSL_1_0_2o
OpenSSL_1_0_2p
OpenSSL_1_0_2q
OpenSSL_1_0_2r
OpenSSL_1_0_2s
OpenSSL_1_0_2t
OpenSSL_1_0_2u
OpenSSL_1_1_0-pre1
OpenSSL_1_1_0-pre2
OpenSSL_1_1_0-pre3
OpenSSL_1_1_0-pre4
OpenSSL_1_1_0-pre5
SSLeay_0_8_1b
SSLeay_0_9_0b
SSLeay_0_9_1b
STATE_after_zlib
STATE_before_zlib
master-post-auto-reformat
master-post-reformat
master-pre-auto-reformat
master-pre-reformat
rsaref

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2180.json"
vanir_signatures 
[
    {
        "target": {
            "file": "crypto/ts/ts_lib.c"
        },
        "digest": {
            "line_hashes": [
                "336675174083158084006826895339832663963",
                "281413504828312712964861641128278023991",
                "333921439718746670005585905731197360480",
                "60517647528473954529734412498370010455",
                "244477556658937098355774812612065706396",
                "269782272574809713761326523668777661463"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://github.com/openssl/openssl/commit/0ed26acce328ec16a3aa635f1ca37365e8c7403a",
        "signature_version": "v1",
        "id": "CVE-2016-2180-0586fe61"
    },
    {
        "target": {
            "function": "TS_OBJ_print_bio",
            "file": "crypto/ts/ts_lib.c"
        },
        "digest": {
            "function_hash": "291316396250902221971467584909130329119",
            "length": 214.0
        },
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://github.com/openssl/openssl/commit/0ed26acce328ec16a3aa635f1ca37365e8c7403a",
        "signature_version": "v1",
        "id": "CVE-2016-2180-857531b5"
    }
]