CVE-2016-2180

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-2180
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2180.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-2180
Downstream
Related
Published
2016-08-01T02:59:11Z
Modified
2025-10-15T08:02:47.099582Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The TSOBJprintbio function in crypto/ts/tslib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0ed26acce328ec16a3aa635f1ca37365e8c7403a

Affected versions

Other

BEFORE_engine
OpenSSL_0_9_1c
OpenSSL_0_9_2b
OpenSSL_0_9_3
OpenSSL_0_9_3a
OpenSSL_0_9_3beta2
OpenSSL_0_9_4
OpenSSL_0_9_5a
OpenSSL_0_9_5a-beta1
OpenSSL_0_9_5a-beta2
OpenSSL_0_9_5beta1
OpenSSL_0_9_5beta2
OpenSSL_0_9_6-beta3
OpenSSL_1_1_0-pre1
OpenSSL_1_1_0-pre2
OpenSSL_1_1_0-pre3
OpenSSL_1_1_0-pre4
OpenSSL_1_1_0-pre5
master-post-auto-reformat
master-post-reformat
master-pre-auto-reformat
master-pre-reformat

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "id": "CVE-2016-2180-0586fe61",
        "source": "https://github.com/openssl/openssl/commit/0ed26acce328ec16a3aa635f1ca37365e8c7403a",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "crypto/ts/ts_lib.c"
        },
        "digest": {
            "line_hashes": [
                "336675174083158084006826895339832663963",
                "281413504828312712964861641128278023991",
                "333921439718746670005585905731197360480",
                "60517647528473954529734412498370010455",
                "244477556658937098355774812612065706396",
                "269782272574809713761326523668777661463"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2016-2180-857531b5",
        "source": "https://github.com/openssl/openssl/commit/0ed26acce328ec16a3aa635f1ca37365e8c7403a",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "TS_OBJ_print_bio",
            "file": "crypto/ts/ts_lib.c"
        },
        "digest": {
            "function_hash": "291316396250902221971467584909130329119",
            "length": 214.0
        }
    }
]