openssl openssl CVE-2016-2106 in OpenSSL and Red Hat Products
Published on May 5, 2016

product logo product logo
Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2016-2106

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2016-2106 are published in these products:

OpenSSL
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Workstation
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Hpc Node
 
Red Hat Enterprise Linux Server Eus
 
Red Hat Enterprise Linux Hpc Node Eus
 

Exploit Probability

EPSS
67.35%
Percentile
98.53%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.