DeutschShown in its original language — a full translation is planned for a future version.
OpenSSL: Mehrere Schwachstellen
view advisory published 2016-05-03
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchführen, beliebigen Programmcode ausführen oder sensible Informationen ausspähen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-2176US | high8.2 | — | ||
The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack… | ||||
| CVE-2016-2109US | high7.5OT elevated | — | ||
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial… | ||||
| CVE-2016-2108US | critical9.8 | — | ||
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memor… | ||||
| CVE-2016-2107US | medium5.9 | Exploit | ||
The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obta… | ||||
| CVE-2016-2106US | high7.5 | — | ||
Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (he… | ||||
| CVE-2016-2105US | high7.5 | — | ||
Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13external
- Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16external
- SUSE Security Update Announcement ID SUSE-SU-2016:1290-1 vom 2016-05-12external
- Red Hat Security Advisory RHSA-2016:1137-1 vom 2016-05-31external
- F5 Security Advisory SOL93600123 vom 2016-05-06external
- Arista Security Advisory 0020 vom 2016-05-06external
- Juniper Security Advisory JSA10770 vom 2017-01-12external
- Splunk Advisory SP-CAAAPP4 vom 2016-07-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan