Double free vulnerability in the dsaprivdecode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
{
"unresolved_ranges": [
{
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"extracted_events": [
{
"last_affected": "12.04"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"extracted_events": [
{
"last_affected": "14.04"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "15.10"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "7.0"
}
]
},
{
"cpe": "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.2.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.2.2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.3.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.4.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "4.4.2"
}
]
},
{
"cpe": "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.4.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "4.4"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.1.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "6.0.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "6.0"
}
]
}
]
}{
"cpe": [
"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "5.6.0"
},
{
"last_affected": "5.6.29"
},
{
"introduced": "5.7.0"
},
{
"last_affected": "5.7.11"
},
{
"introduced": "0"
},
{
"last_affected": "4.0.1"
},
{
"last_affected": "4.0.2"
},
{
"last_affected": "4.0.3"
},
{
"last_affected": "4.0.4"
},
{
"last_affected": "4.1"
},
{
"last_affected": "4.1.2"
},
{
"last_affected": "5.0"
},
{
"last_affected": "5.0.1"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_FIELD"
}{
"cpe": [
"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "1.0.1"
},
{
"last_affected": "1.0.1-beta1"
},
{
"last_affected": "1.0.1-beta2"
},
{
"last_affected": "1.0.1-beta3"
},
{
"last_affected": "1.0.1a"
},
{
"last_affected": "1.0.1b"
},
{
"last_affected": "1.0.1c"
},
{
"last_affected": "1.0.1d"
},
{
"last_affected": "1.0.1e"
},
{
"last_affected": "1.0.1f"
},
{
"last_affected": "1.0.1g"
},
{
"last_affected": "1.0.1h"
},
{
"last_affected": "1.0.1i"
},
{
"last_affected": "1.0.1j"
},
{
"last_affected": "1.0.1k"
},
{
"last_affected": "1.0.1l"
},
{
"last_affected": "1.0.1m"
},
{
"last_affected": "1.0.1n"
},
{
"last_affected": "1.0.1o"
},
{
"last_affected": "1.0.1p"
},
{
"last_affected": "1.0.1q"
},
{
"last_affected": "1.0.1r"
},
{
"last_affected": "1.0.2"
},
{
"last_affected": "1.0.2-beta1"
},
{
"last_affected": "1.0.2-beta2"
},
{
"last_affected": "1.0.2-beta3"
},
{
"last_affected": "1.0.2a"
},
{
"last_affected": "1.0.2b"
},
{
"last_affected": "1.0.2c"
},
{
"last_affected": "1.0.2d"
},
{
"last_affected": "1.0.2e"
},
{
"last_affected": "1.0.2f"
},
{
"last_affected": "4.0"
}
],
"source": "CPE_FIELD"
}