CVE-2016-2177

Published: Jun 20, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.

Affected (39)

Products: Hp: Icewall Mcrp, Icewall Sso, Icewall Sso Agent Option · Openssl: Openssl · Oracle: Linux, Solaris

3 products

Icewall Mcrp

Icewall Sso

Icewall Sso Agent Option

1 product

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Hp Icewall Mcrp	Version 3.0
Hp Icewall Sso	Version 10.0
Hp Icewall Sso	Version 10.0
Hp Icewall Sso Agent Option	Version 10.0

Configuration B

30 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 1.0.1
Openssl Openssl	Version 1.0.1a
Openssl Openssl	Version 1.0.1b
Openssl Openssl	Version 1.0.1c
Openssl Openssl	Version 1.0.1d
Openssl Openssl	Version 1.0.1e
Openssl Openssl	Version 1.0.1f
Openssl Openssl	Version 1.0.1g
Openssl Openssl	Version 1.0.1h
Openssl Openssl	Version 1.0.1i
Openssl Openssl	Version 1.0.1j
Openssl Openssl	Version 1.0.1k
Openssl Openssl	Version 1.0.1l
Openssl Openssl	Version 1.0.1m
Openssl Openssl	Version 1.0.1n
Openssl Openssl	Version 1.0.1o
Openssl Openssl	Version 1.0.1p
Openssl Openssl	Version 1.0.1q
Openssl Openssl	Version 1.0.1r
Openssl Openssl	Version 1.0.1s
Openssl Openssl	Version 1.0.1t
Openssl Openssl	Version 1.0.2
Openssl Openssl	Version 1.0.2a
Openssl Openssl	Version 1.0.2b
Openssl Openssl	Version 1.0.2c
Openssl Openssl	Version 1.0.2d
Openssl Openssl	Version 1.0.2e
Openssl Openssl	Version 1.0.2f
Openssl Openssl	Version 1.0.2g
Openssl Openssl	Version 1.0.2h

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 5
Oracle Linux	Version 6
Oracle Linux	Version 7
Oracle Solaris	Version 10
Oracle Solaris	Version 11.3

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (128)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-1940.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2016-2957.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2017-1659.html

Source: secalert@redhat.com

http://seclists.org/fulldisclosure/2017/Jul/31

Source: secalert@redhat.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=swg21995039

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3673

Source: secalert@redhat.com

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2016/06/08/9

Source: secalert@redhat.com

http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/540957/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/91319

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036088

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.splunk.com/view/SP-CAAAPSV

Source: secalert@redhat.com

Third Party Advisory

http://www.splunk.com/view/SP-CAAAPUE

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3087-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3087-2

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-3181-1

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:0193

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:0194

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:1658

Source: secalert@redhat.com

https://bto.bluecoat.com/security-advisory/sa132

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1341705

Source: secalert@redhat.com

Issue TrackingPatch

https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

Source: secalert@redhat.com

https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7

Source: secalert@redhat.com

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448

Source: secalert@redhat.com

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03763en_us

Source: secalert@redhat.com

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448

Source: secalert@redhat.com

Third Party Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01

Source: secalert@redhat.com

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312

Source: secalert@redhat.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10165

Source: secalert@redhat.com

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10215

Source: secalert@redhat.com

https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201612-16

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

https://support.f5.com/csp/article/K23873366

Source: secalert@redhat.com

https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us

Source: secalert@redhat.com

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us

Source: secalert@redhat.com

https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24

Source: secalert@redhat.com

https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager

Source: secalert@redhat.com

https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/

Source: secalert@redhat.com

https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/

Source: secalert@redhat.com

https://www.tenable.com/security/tns-2016-16

Source: secalert@redhat.com

Third Party Advisory

https://www.tenable.com/security/tns-2016-20

Source: secalert@redhat.com

https://www.tenable.com/security/tns-2016-21

Source: secalert@redhat.com

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759