CVE-2016-6303

Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

References

Affected packages

Git / github.com/nodejs/node

Affected ranges

Type

GIT

Repo

https://github.com/nodejs/node

Events

Introduced

Fixed

0ad4bbd94af535d9b70f64fff28652f23b05c403

Introduced

f9f837885343a2a3f5ba2b8c510eaac395c8c865

Fixed

57ca7390d03372b99d9cf8563c75a3895d93a6e6

Introduced

ce3e3c5fe15479475c068482c48eb9cbf1ac9df5

Fixed

0a3ad92292505bebe6d3139c90d8ba79a7a00141

Database specific

{
    "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.12.16"
        },
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.6.0"
        },
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.6.0"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.0.6

v0.1.0

v0.1.1

v0.1.10

v0.1.100

v0.1.101

v0.1.102

v0.1.103

v0.1.104

v0.1.11

v0.1.12

v0.1.13

v0.1.14

v0.1.15

v0.1.16

v0.1.17

v0.1.18

v0.1.19

v0.1.2

v0.1.20

v0.1.21

v0.1.22

v0.1.23

v0.1.24

v0.1.25

v0.1.26

v0.1.27

v0.1.28

v0.1.29

v0.1.3

v0.1.30

v0.1.31

v0.1.32

v0.1.33

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.1.9

v0.1.92

v0.1.93

v0.1.94

v0.1.95

v0.1.96

v0.1.97

v0.1.98

v0.1.99

v0.12.10

v0.12.11

v0.12.12

v0.12.13

v0.12.14

v0.12.15

v0.12.8

v0.12.9

v0.2.0

v0.3.0

v0.3.1

v0.3.2

v0.3.4

v0.3.5

v0.3.6

v0.3.7

v0.3.8

v0.4.0

v0.5.0

v0.5.1

v0.5.10

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.5-rc1

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.1

v0.7.0

v0.7.2

v0.7.3

v4.*

v4.0.0

v4.1.0

v4.1.1

v4.1.2

v4.2.0

v4.2.1

v4.2.2

v4.2.3

v4.2.4

v4.2.5

v4.2.6

v4.3.0

v4.3.1

v4.3.2

v4.4.0

v4.4.1

v4.4.2

v4.4.3

v4.4.4

v4.4.5

v4.4.6

v4.4.7

v4.5.0

v6.*

v6.0.0

v6.1.0

v6.2.0

v6.2.1

v6.2.2

v6.3.0

v6.3.1

v6.4.0

v6.5.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6303.json"

Git / github.com/openssl/openssl

Affected ranges

Type

GIT

Repo

https://github.com/openssl/openssl

Events

Introduced

888759a1d38197f29de7227876c3b58fbff8549f

Last affected

e818b74be2170fbe957a07b0da4401c2b694b3b8

Database specific

{
    "cpe": [
        "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.0.1"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "1.0.1a"
        },
        {
            "last_affected": "1.0.1a"
        },
        {
            "introduced": "1.0.1b"
        },
        {
            "last_affected": "1.0.1b"
        },
        {
            "introduced": "1.0.1c"
        },
        {
            "last_affected": "1.0.1c"
        },
        {
            "introduced": "1.0.1d"
        },
        {
            "last_affected": "1.0.1d"
        },
        {
            "introduced": "1.0.1e"
        },
        {
            "last_affected": "1.0.1e"
        },
        {
            "introduced": "1.0.1f"
        },
        {
            "last_affected": "1.0.1f"
        },
        {
            "introduced": "1.0.1g"
        },
        {
            "last_affected": "1.0.1g"
        },
        {
            "introduced": "1.0.1h"
        },
        {
            "last_affected": "1.0.1h"
        },
        {
            "introduced": "1.0.1i"
        },
        {
            "last_affected": "1.0.1i"
        },
        {
            "introduced": "1.0.1j"
        },
        {
            "last_affected": "1.0.1j"
        },
        {
            "introduced": "1.0.1k"
        },
        {
            "last_affected": "1.0.1k"
        },
        {
            "introduced": "1.0.1l"
        },
        {
            "last_affected": "1.0.1l"
        },
        {
            "introduced": "1.0.1m"
        },
        {
            "last_affected": "1.0.1m"
        },
        {
            "introduced": "1.0.1n"
        },
        {
            "last_affected": "1.0.1n"
        },
        {
            "introduced": "1.0.1o"
        },
        {
            "last_affected": "1.0.1o"
        },
        {
            "introduced": "1.0.1p"
        },
        {
            "last_affected": "1.0.1p"
        },
        {
            "introduced": "1.0.1q"
        },
        {
            "last_affected": "1.0.1q"
        },
        {
            "introduced": "1.0.1r"
        },
        {
            "last_affected": "1.0.1r"
        },
        {
            "introduced": "1.0.1s"
        },
        {
            "last_affected": "1.0.1s"
        },
        {
            "introduced": "1.0.1t"
        },
        {
            "last_affected": "1.0.1t"
        },
        {
            "introduced": "1.0.2"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "1.0.2a"
        },
        {
            "last_affected": "1.0.2a"
        },
        {
            "introduced": "1.0.2b"
        },
        {
            "last_affected": "1.0.2b"
        },
        {
            "introduced": "1.0.2c"
        },
        {
            "last_affected": "1.0.2c"
        },
        {
            "introduced": "1.0.2d"
        },
        {
            "last_affected": "1.0.2d"
        },
        {
            "introduced": "1.0.2e"
        },
        {
            "last_affected": "1.0.2e"
        },
        {
            "introduced": "1.0.2f"
        },
        {
            "last_affected": "1.0.2f"
        },
        {
            "introduced": "1.0.2g"
        },
        {
            "last_affected": "1.0.2g"
        },
        {
            "introduced": "1.0.2h"
        },
        {
            "last_affected": "1.0.2h"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*

1.0.1

1.0.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6303.json"