cbcvebase.
CVE-2016-2106
published 2016-05-05

CVE-2016-2106: Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a…

PriorityP347high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
27.26%
97.8th percentile
Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
appleos_x_el_capitan_v10.11.6_and_security_update_2016-004
debianopenssl< openssl 1.0.2h-1 (bookworm)openssl 1.0.2h-1 (bookworm)
opensslopenssl<= 1.0.1s
opensslopenssl
opensslopenssl
opensslopenssl
opensslopenssl
opensslopenssl
opensslopenssl
opensslopenssl
opensslopenssl
opensslopenssl>= 0 < 1.0.2h-11.0.2h-1
opensslopenssl>= 0 < 1.0.2h-11.0.2h-1
opensslopenssl>= 0 < 1.0.2h-11.0.2h-1
opensslopenssl>= 0 < 1.0.2h-11.0.2h-1
opensslopenssl>= 0 < 1.0.1f-1ubuntu2.191.0.1f-1ubuntu2.19
opensslopenssl>= 0 < 1.0.2g-1ubuntu4.11.0.2g-1ubuntu4.1
paloaltocortex_xdr
paloaltoglobalprotect
paloaltopan-os
redhatenterprise_linux_desktop
redhatenterprise_linux_desktop
redhatenterprise_linux_hpc_node
redhatenterprise_linux_hpc_node
redhatenterprise_linux_hpc_node_eus

Detection & IOCsextracted from sources · hover to see the quote

  • The vulnerable function is EVP_EncryptUpdate() in crypto/evp/evp_enc.c; monitor for integer overflow triggered by supplying very large amounts of input data to this function
  • An overflow in EVP_EncryptUpdate() leads to heap memory corruption; detection should focus on heap corruption crashes or abnormal memory usage in OpenSSL-linked processes receiving large encrypted payloads
  • CVE-2016-2106 is distinct from CVE-2016-2105 (EVP_EncodeUpdate overflow); ensure detection rules differentiate between the two overflow conditions in OpenSSL
  • ·The overflow in EVP_EncryptUpdate() is believed not to be reachable via internal OpenSSL code paths, limiting practical exploitability to external callers supplying large data
  • ·Red Hat Enterprise Linux 4, 5, 6, and 7 openssl/openssl096b/openssl097a/openssl098e packages are marked 'Will not fix', meaning patched versions may not be available for those platforms
  • ·Apple resolved this CVE by backporting fixes from OpenSSL 1.0.2h/1.0.1t to OpenSSL 0.9.8, so version checks alone may not identify patched Apple systems

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.