Vulnerability DatabaseCVE-2016-2176
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2016-2176
Published:May 05, 2016
Updated:May 17, 2026
The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.
Affected Packages
openssl (CONDA):
Affected version(s) >=1.0.2d <1.0.2i
Fix Suggestion:
Update to version 1.0.2i
Related Resources (23)
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03765en_us
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-openssl
https://support.apple.com/HT206903
https://security.gentoo.org/glsa/201612-16
http://www.securityfocus.com/bid/91787
https://bto.bluecoat.com/security-advisory/sa123
http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
https://kc.mcafee.com/corporate/index?page=content&id=SB10160
http://www.securitytracker.com/id/1035721
http://packetstormsecurity.com/files/136912/Slackware-Security-Advisory-openssl-Updates.html
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
https://www.openssl.org/news/secadv/20160503.txt
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40202
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=2919516136a4227d9e6d8f2fe66ef976aaf8c561
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.542103
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03756en_us
https://www.tenable.com/security/tns-2016-18
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
http://www.securityfocus.com/bid/89746
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
https://security.netapp.com/advisory/ntap-20160504-0001/
Do you need more information?
Contact Us
CVSS v4
Base Score:
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
NONE
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
8.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
HIGH
Weakness Type (CWE)
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-119
EPSS
Base Score:
7.79