NVD

Id
17158  
Name
CVE-2016-0797  
Description
Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-03-03  
Modified Date
2016-12-27  
Seq
2016-0797  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95362 17158 CVE-2016-0797 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
95363 17158 CVE-2016-0797 SUSE-SU-2016:0617  View
95364 17158 CVE-2016-0797 SUSE-SU-2016:0620  View
95365 17158 CVE-2016-0797 SUSE-SU-2016:0621  View
95366 17158 CVE-2016-0797 SUSE-SU-2016:0624  View
95367 17158 CVE-2016-0797 openSUSE-SU-2016:0627  View
95368 17158 CVE-2016-0797 openSUSE-SU-2016:0628  View
95369 17158 CVE-2016-0797 SUSE-SU-2016:0631  View
95370 17158 CVE-2016-0797 openSUSE-SU-2016:0637  View
95371 17158 CVE-2016-0797 openSUSE-SU-2016:0638  View
95372 17158 CVE-2016-0797 openSUSE-SU-2016:0640  View
95373 17158 CVE-2016-0797 SUSE-SU-2016:0641  View
95374 17158 CVE-2016-0797 SUSE-SU-2016:0678  View
95375 17158 CVE-2016-0797 openSUSE-SU-2016:0720  View
95376 17158 CVE-2016-0797 SUSE-SU-2016:1057  View
95377 17158 CVE-2016-0797 openSUSE-SU-2016:1239  View
95378 17158 CVE-2016-0797 openSUSE-SU-2016:1241  View
95379 17158 CVE-2016-0797 openSUSE-SU-2016:1566  View
95380 17158 CVE-2016-0797 HPSBGN03563  View
95381 17158 CVE-2016-0797 http://openssl.org/news/secadv/20160301.txt  View
95382 17158 CVE-2016-0797 20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016  View
95383 17158 CVE-2016-0797 DSA-3500  View
95384 17158 CVE-2016-0797 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
95385 17158 CVE-2016-0797 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
95386 17158 CVE-2016-0797 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
95387 17158 CVE-2016-0797 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html  View
95388 17158 CVE-2016-0797 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
95389 17158 CVE-2016-0797 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
95390 17158 CVE-2016-0797 83763  View
95391 17158 CVE-2016-0797 91787  View
95392 17158 CVE-2016-0797 USN-2914-1  View
95393 17158 CVE-2016-0797 https://git.openssl.org/?p=openssl.git;a=commit;h=c175308407858afff3fc8c2e5e085d94d12edc7d  View
95394 17158 CVE-2016-0797 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990  View
95395 17158 CVE-2016-0797 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168  View
95396 17158 CVE-2016-0797 https://kc.mcafee.com/corporate/index?page=content&id=SB10156  View
95397 17158 CVE-2016-0797 GLSA-201603-15  View
95398 17158 CVE-2016-0797 https://www.openssl.org/news/secadv/20160301.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
841 JVNDB-2016-001614 OpenSSL における整数オーバーフローの脆弱性 OpenSSL には、crypto/bn/bn.h および crypto/bn/bn_print.c に関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2016-0797 87001 CVE-2016-0797 17158 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001614.html 2016-03-01 2016-11-14 View