CVE-2016-2105

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-2105
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2105.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-2105
Downstream
Related
Published
2016-05-05T01:59:01.200Z
Modified
2026-05-12T04:00:24.529763Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "0.10.0"
                },
                {
                    "fixed": "0.10.45"
                },
                {
                    "introduced": "0.12.0"
                },
                {
                    "fixed": "0.12.14"
                },
                {
                    "introduced": "5.0.0"
                },
                {
                    "fixed": "5.11.1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "extracted_events": [
                {
                    "introduced": "4.2.0"
                },
                {
                    "fixed": "4.4.4"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:nodejs:node.js:6.0.0:*:*:*:-:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1-beta1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1-beta2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1-beta3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1a"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1b"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1c"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1d"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1e"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1f"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1g"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1h"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1i"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1j"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1k"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1l"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1m"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1n"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1o"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1p"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1q"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1r"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.1s"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2-beta1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2-beta2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2-beta3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2a"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2b"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2c"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2d"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2e"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2f"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "1.0.2g"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:apple:mac_os_x:10.11.5:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "10.11.5"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "12.04"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.04"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.10"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "16.04"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "42.1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "13.2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.2"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "6.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63f68c53873174e07ef8e6d7d60e9cec05c4b34e
Last affected
99077a555bc197b8be46287543cbde36ab4da8dd
Last affected
270fd3411e3d671a73ed9725940a30080f59ce6d
Last affected
c942a7ecd2a6b10af9177d7201aeabe9e0af8388
Database specific 
{
    "cpe": [
        "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
        "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "5.6.0"
        },
        {
            "last_affected": "5.6.30"
        },
        {
            "introduced": "5.7.0"
        },
        {
            "last_affected": "5.7.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "introduced": "4.0.0"
        },
        {
            "last_affected": "4.1.2"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-4.1.1
mysql-4.1.2
mysql-5.*
mysql-5.1.4
mysql-5.6.30
mysql-5.7.12
mysql-8.*
mysql-8.0.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2105.json"