critical
CVE-2016-0799
OpenSSL: Fix memory issues in BIO_*printf functions
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat2.6AV:N/AC:H/Au:N/C:N/I:N/A:P
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Amazon (high), Oracle (high), Red Hat (low), Ubuntu (low).
Description
The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | openssl, openssl-debuginfo, openssl-devel and 2 more | 1:1.0.1k-14.89.amzn1 |
| debian 11 | openssl | 1.0.2g-1 |
| debian 12 | openssl | 1.0.2g-1 |
| debian 13 | openssl | 1.0.2g-1 |
| debian 14 | openssl | 1.0.2g-1 |
| debian 7 | openssl | 1.0.1e-2+deb7u20 |
| debian 8 | openssl | 1.0.1k-3+deb8u4 |
| echo | openssl | 1.0.2g-1 |
| Oracle Linux 5 | openssl, openssl-devel, openssl-perl | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 6 | openssl, openssl-devel, openssl-fips and 5 more | 1.0.1e-48.el6_8.1 and 1 more |
| Oracle Linux 7 | openssl, openssl-devel, openssl-libs and 2 more | 1:1.0.1e-51.el7_2.5 |
| Red Hat | openssl098e | no fix listed |
Show all 46 entries from 28 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | openssl | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-debuginfo | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-devel | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-perl | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-static | 1:1.0.1k-14.89.amzn1 |
| debian 11 | openssl | 1.0.2g-1 |
| debian 12 | openssl | 1.0.2g-1 |
| debian 13 | openssl | 1.0.2g-1 |
| debian 14 | openssl | 1.0.2g-1 |
| debian 7 | openssl | 1.0.1e-2+deb7u20 |
| debian 8 | openssl | 1.0.1k-3+deb8u4 |
| echo | openssl | 1.0.2g-1 |
| Oracle Linux 5 | openssl | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 5 | openssl-devel | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 5 | openssl-perl | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 6 | openssl | 1.0.1e-48.el6_8.1 |
| Oracle Linux 6 | openssl-devel | 1.0.1e-48.el6_8.1 |
| Oracle Linux 6 | openssl-fips | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-fips-devel | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-fips-perl | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-fips-static | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-perl | 1.0.1e-48.el6_8.1 |
| Oracle Linux 6 | openssl-static | 1.0.1e-48.el6_8.1 |
| Oracle Linux 7 | openssl | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-devel | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-libs | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-perl | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-static | 1:1.0.1e-51.el7_2.5 |
| Red Hat | openssl098e | no fix listed |
| root.io debian 11 | rootio-openssl | 1.0.2g-1 |
| root.io debian 12 | rootio-openssl | 1.0.2g-1 |
| seal Red Hat 6 | openssl | 1.0.1e-59.el6_10+sp999, 1.0.1e-61.el6_10+sp999 |
| seal Red Hat 6 | seal-openssl | 1.0.1e-59.el6_10+sp999, 1.0.1e-61.el6_10+sp999 |
| ubuntu 12.04 | openssl | 1.0.1-4ubuntu5.35 |
| ubuntu 14.04 | openssl | 1.0.1f-1ubuntu2.18 |
| ubuntu 14.04-ESM | openssl | 1.0.1f-1ubuntu2.18 |
| ubuntu 15.10 | openssl | 1.0.2d-0ubuntu1.4 |
| ubuntu 16.04 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 16.04-ESM | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 16.10 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 17.04 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 17.10 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 18.04 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 18.04-ESM | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 18.10 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 19.04 | openssl | 1.0.2g-1ubuntu2 |
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html
All 66 references
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html
- http://marc.info/?l=bugtraq&m=145983526810210&w=2
- http://marc.info/?l=bugtraq&m=146108058503441&w=2
- http://openssl.org/news/secadv/20160301.txt
- http://rhn.redhat.com/errata/RHSA-2016-0722.html
- http://rhn.redhat.com/errata/RHSA-2016-0996.html
- http://rhn.redhat.com/errata/RHSA-2016-2073.html
- http://rhn.redhat.com/errata/RHSA-2016-2957.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
- http://www.debian.org/security/2016/dsa-3500
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/83755
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1035133
- http://www.ubuntu.com/usn/USN-2914-1
- https://access.redhat.com/security/cve/CVE-2016-0799
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73
- https://guidovranken.wordpress.com/2016/02/27/openssl-cve-2016-0799-heap-corruption-via-bio_printf/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168
- https://linux.oracle.com/cve/CVE-2016-0799.html
- https://linux.oracle.com/errata/ELSA-2016-3576.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-0799
- https://security.freebsd.org/advisories/FreeBSD-SA-16:12.openssl.asc
- https://security.gentoo.org/glsa/201603-15
- https://ubuntu.com/security/notices/USN-2914-1
- https://www.cve.org/CVERecord?id=CVE-2016-0799
- https://www.openssl.org/news/secadv/20160301.txt