CVE-2016-6303

Source
https://nvd.nist.gov/vuln/detail/CVE-2016-6303
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6303.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6303
Related
Published
2016-09-16T05:59:13Z
Modified
2024-10-12T02:07:59.995001Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

References

Affected packages

Alpine:v3.2 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2h-r3

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2f-r0
1.0.2g-r0
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2

Alpine:v3.3 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2h-r3

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2f-r0
1.0.2g-r0
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2

Alpine:v3.4 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2h-r3

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2

Alpine:v3.5 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2h-r3

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2

Alpine:v3.6 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2h-r3

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2

Alpine:v3.7 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2h-r3

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2

Alpine:v3.8 / openssl

Package

Name
openssl
Purl
pkg:apk/alpine/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2h-r3

Affected versions

0.*

0.9.8i-r0
0.9.8j-r0
0.9.8k-r0
0.9.8k-r1
0.9.8k-r2
0.9.8k-r3
0.9.8k-r4
0.9.8k-r5
0.9.8k-r6
0.9.8k-r7
0.9.8l-r0
0.9.8l-r1
0.9.8m-r0
0.9.8n-r0
0.9.8n-r1

1.*

1.0.0-r0
1.0.0a-r0
1.0.0a-r1
1.0.0a-r2
1.0.0a-r3
1.0.0a-r4
1.0.0b-r0
1.0.0c-r0
1.0.0d-r0
1.0.0e-r0
1.0.0f-r0
1.0.0g-r0
1.0.0h-r0
1.0.1-r0
1.0.1a-r0
1.0.1b-r0
1.0.1c-r0
1.0.1c-r1
1.0.1c-r2
1.0.1c-r3
1.0.1d-r0
1.0.1d-r1
1.0.1e-r0
1.0.1e-r1
1.0.1e-r2
1.0.1e-r3
1.0.1e-r4
1.0.1e-r5
1.0.1e-r6
1.0.1e-r7
1.0.1f-r0
1.0.1g-r0
1.0.1g-r1
1.0.1g-r2
1.0.1g-r3
1.0.1h-r0
1.0.1i-r0
1.0.1i-r1
1.0.1i-r2
1.0.1i-r3
1.0.1j-r0
1.0.1k-r0
1.0.1l-r0
1.0.2-r0
1.0.2a-r0
1.0.2a-r1
1.0.2b-r0
1.0.2c-r0
1.0.2d-r0
1.0.2e-r0
1.0.2e-r1
1.0.2f-r0
1.0.2f-r1
1.0.2f-r2
1.0.2g-r0
1.0.2g-r1
1.0.2g-r2
1.0.2g-r3
1.0.2h-r0
1.0.2h-r1
1.0.2h-r2

Debian:11 / openssl

Package

Name
openssl
Purl
pkg:deb/debian/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / openssl

Package

Name
openssl
Purl
pkg:deb/debian/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / openssl

Package

Name
openssl
Purl
pkg:deb/debian/openssl?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.2i-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/nodejs/node

Affected ranges

Type
GIT
Repo
https://github.com/nodejs/node
Events

Affected versions

v4.*

v4.0.0
v4.1.0
v4.1.1
v4.1.2
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.3.0
v4.3.1
v4.3.2
v4.4.0
v4.4.1
v4.4.2
v4.4.3
v4.4.4
v4.4.5
v4.4.6
v4.4.7
v4.5.0