openssl openssl CVE-2016-2109 in OpenSSL and Red Hat Products
Published on May 5, 2016

product logo product logo
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2016-2109

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2016-2109 are published in these products:

OpenSSL
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Workstation
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Hpc Node
 
Red Hat Enterprise Linux Server Eus
 
Red Hat Enterprise Linux Hpc Node Eus
 

Exploit Probability

EPSS
57.94%
Percentile
98.17%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.