CVE-2016-2842

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-2842
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2842.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-2842
Downstream
Published
2016-03-03T20:59:04.737Z
Modified
2026-04-11T15:16:12.196162Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The doaproutch function in crypto/bio/bprint.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
888759a1d38197f29de7227876c3b58fbff8549f
Last affected
ab585551c0a577d9a91825d446465905a5ea17e3
Last affected
e2dfb655f798831ffb29242ad804013ddb0c5d5b
Last affected
08e4c7a967cc9d82264d125440d8b17b912bd250
Last affected
e818b74be2170fbe957a07b0da4401c2b694b3b8
Last affected
94f416601754dbe65e287f8e1eca01fa32f74a7a
Last affected
2f63ad1c6daa61614f3d58de0889bf68e9f75853
Last affected
2c5db8dac3a06fe5b2c889838a606138ee3542ed
Database specific 
{
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "last_affected": "1.0.1-beta1"
        },
        {
            "last_affected": "1.0.1-beta2"
        },
        {
            "last_affected": "1.0.1-beta3"
        },
        {
            "last_affected": "1.0.1a"
        },
        {
            "last_affected": "1.0.1b"
        },
        {
            "last_affected": "1.0.1c"
        },
        {
            "last_affected": "1.0.1d"
        },
        {
            "last_affected": "1.0.1e"
        },
        {
            "last_affected": "1.0.1f"
        },
        {
            "last_affected": "1.0.1g"
        },
        {
            "last_affected": "1.0.1h"
        },
        {
            "last_affected": "1.0.1i"
        },
        {
            "last_affected": "1.0.1j"
        },
        {
            "last_affected": "1.0.1k"
        },
        {
            "last_affected": "1.0.1l"
        },
        {
            "last_affected": "1.0.1m"
        },
        {
            "last_affected": "1.0.1n"
        },
        {
            "last_affected": "1.0.1o"
        },
        {
            "last_affected": "1.0.1p"
        },
        {
            "last_affected": "1.0.1q"
        },
        {
            "last_affected": "1.0.1r"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "last_affected": "1.0.2-beta1"
        },
        {
            "last_affected": "1.0.2-beta2"
        },
        {
            "last_affected": "1.0.2-beta3"
        },
        {
            "last_affected": "1.0.2a"
        },
        {
            "last_affected": "1.0.2b"
        },
        {
            "last_affected": "1.0.2c"
        },
        {
            "last_affected": "1.0.2d"
        },
        {
            "last_affected": "1.0.2e"
        },
        {
            "last_affected": "1.0.2f"
        }
    ]
}

Affected versions

Other
OpenSSL_1_0_1
OpenSSL_1_0_1-beta1
OpenSSL_1_0_1-beta2
OpenSSL_1_0_1-beta3
OpenSSL_1_0_1-post-auto-reformat
OpenSSL_1_0_1-post-reformat
OpenSSL_1_0_1-pre-auto-reformat
OpenSSL_1_0_1-pre-reformat
OpenSSL_1_0_1a
OpenSSL_1_0_1b
OpenSSL_1_0_1c
OpenSSL_1_0_1d
OpenSSL_1_0_1e
OpenSSL_1_0_1f
OpenSSL_1_0_1g
OpenSSL_1_0_1h
OpenSSL_1_0_1i
OpenSSL_1_0_1j
OpenSSL_1_0_1k
OpenSSL_1_0_1l
OpenSSL_1_0_1m
OpenSSL_1_0_1n
OpenSSL_1_0_1o
OpenSSL_1_0_1p
OpenSSL_1_0_1q
OpenSSL_1_0_1r
OpenSSL_1_0_1s
OpenSSL_1_0_1t
OpenSSL_1_0_1u
OpenSSL_1_0_2
OpenSSL_1_0_2-beta1
OpenSSL_1_0_2-beta2
OpenSSL_1_0_2-beta3
OpenSSL_1_0_2-post-auto-reformat
OpenSSL_1_0_2-post-reformat
OpenSSL_1_0_2-pre-auto-reformat
OpenSSL_1_0_2-pre-reformat
OpenSSL_1_0_2a
OpenSSL_1_0_2b
OpenSSL_1_0_2c
OpenSSL_1_0_2d
OpenSSL_1_0_2e
OpenSSL_1_0_2f
OpenSSL_1_0_2g
OpenSSL_1_0_2h
OpenSSL_1_0_2i
OpenSSL_1_0_2j
OpenSSL_1_0_2k
OpenSSL_1_0_2l
OpenSSL_1_0_2m
OpenSSL_1_0_2n
OpenSSL_1_0_2o
OpenSSL_1_0_2p
OpenSSL_1_0_2q
OpenSSL_1_0_2r
OpenSSL_1_0_2s
OpenSSL_1_0_2t
OpenSSL_1_0_2u

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-2842.json"