critical
CVE-2016-2177
openssl: Possible integer overflow vulnerabilities in codebase
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Oracle (high), Amazon (medium), Red Hat (low), Ubuntu (low).
Description
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.2 | openssl | 1.0.2h-r1 |
| alpine 3.3 | openssl | 1.0.2h-r1 |
| alpine 3.4 | openssl | 1.0.2h-r1 |
| alpine 3.5 | openssl | 1.0.2h-r1 |
| alpine 3.6 | openssl | 1.0.2h-r1 |
| alpine 3.7 | openssl | 1.0.2h-r1 |
| alpine 3.8 | openssl | 1.0.2h-r1 |
| amazon linux 1 | openssl, openssl-debuginfo, openssl-devel and 2 more | 1:1.0.1k-15.96.amzn1 |
| debian 11 | openssl | 1.0.2i-1 |
| debian 12 | openssl | 1.0.2i-1 |
| debian 13 | openssl | 1.0.2i-1 |
| debian 14 | openssl | 1.0.2i-1 |
Show all 48 entries from 34 sources
| Source | Package | Fixed in |
|---|---|---|
| alpine 3.2 | openssl | 1.0.2h-r1 |
| alpine 3.3 | openssl | 1.0.2h-r1 |
| alpine 3.4 | openssl | 1.0.2h-r1 |
| alpine 3.5 | openssl | 1.0.2h-r1 |
| alpine 3.6 | openssl | 1.0.2h-r1 |
| alpine 3.7 | openssl | 1.0.2h-r1 |
| alpine 3.8 | openssl | 1.0.2h-r1 |
| amazon linux 1 | openssl | 1:1.0.1k-15.96.amzn1 |
| amazon linux 1 | openssl-debuginfo | 1:1.0.1k-15.96.amzn1 |
| amazon linux 1 | openssl-devel | 1:1.0.1k-15.96.amzn1 |
| amazon linux 1 | openssl-perl | 1:1.0.1k-15.96.amzn1 |
| amazon linux 1 | openssl-static | 1:1.0.1k-15.96.amzn1 |
| debian 11 | openssl | 1.0.2i-1 |
| debian 12 | openssl | 1.0.2i-1 |
| debian 13 | openssl | 1.0.2i-1 |
| debian 14 | openssl | 1.0.2i-1 |
| debian 7 | openssl | 1.0.1t-1+deb7u1 |
| debian 8 | openssl | 1.0.1t-1+deb8u4 |
| echo | openssl | 1.0.2i-1 |
| Oracle Linux 5 | openssl | 0.9.8e-40.0.3.el5_11 |
| Oracle Linux 5 | openssl-devel | 0.9.8e-40.0.3.el5_11 |
| Oracle Linux 5 | openssl-perl | 0.9.8e-40.0.3.el5_11 |
| Oracle Linux 6 | openssl | 1.0.1e-48.el6_8.3 |
| Oracle Linux 6 | openssl-devel | 1.0.1e-48.el6_8.3 |
| Oracle Linux 6 | openssl-perl | 1.0.1e-48.el6_8.3 |
| Oracle Linux 6 | openssl-static | 1.0.1e-48.el6_8.3 |
| Oracle Linux 7 | openssl | 1:1.0.1e-51.el7_2.7 |
| Oracle Linux 7 | openssl-devel | 1:1.0.1e-51.el7_2.7 |
| Oracle Linux 7 | openssl-libs | 1:1.0.1e-51.el7_2.7 |
| Oracle Linux 7 | openssl-perl | 1:1.0.1e-51.el7_2.7 |
| Oracle Linux 7 | openssl-static | 1:1.0.1e-51.el7_2.7 |
| Red Hat | openssl098e | no fix listed |
| root.io debian 11 | rootio-openssl | 1.0.2i-1 |
| root.io debian 12 | rootio-openssl | 1.0.2i-1 |
| seal Red Hat 6 | openssl | 1.0.1e-59.el6_10+sp999, 1.0.1e-61.el6_10+sp999 |
| seal Red Hat 6 | seal-openssl | 1.0.1e-59.el6_10+sp999, 1.0.1e-61.el6_10+sp999 |
| ubuntu 12.04 | openssl | 1.0.1-4ubuntu5.39 |
| ubuntu 14.04 | openssl | 1.0.1f-1ubuntu2.22 |
| ubuntu 14.04-ESM | openssl | 1.0.1f-1ubuntu2.22 |
| ubuntu 16.04 | openssl | 1.0.2g-1ubuntu4.4 |
| ubuntu 16.04-ESM | openssl | 1.0.2g-1ubuntu4.4 |
| ubuntu 16.10 | openssl | 1.0.2g-1ubuntu9 |
| ubuntu 17.04 | openssl | 1.0.2g-1ubuntu9 |
| ubuntu 17.10 | openssl | 1.0.2g-1ubuntu9 |
| ubuntu 18.04 | openssl | 1.0.2g-1ubuntu9 |
| ubuntu 18.04-ESM | openssl | 1.0.2g-1ubuntu9 |
| ubuntu 18.10 | openssl | 1.0.2g-1ubuntu9 |
| ubuntu 19.04 | openssl | 1.0.2g-1ubuntu9 |
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html
All 73 references
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html
- http://rhn.redhat.com/errata/RHSA-2016-1940.html
- http://rhn.redhat.com/errata/RHSA-2016-2957.html
- http://rhn.redhat.com/errata/RHSA-2017-1659.html
- http://seclists.org/fulldisclosure/2017/Jul/31
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl
- http://www-01.ibm.com/support/docview.wss?uid=swg21995039
- http://www.debian.org/security/2016/dsa-3673
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en
- http://www.openwall.com/lists/oss-security/2016/06/08/9
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
- http://www.securityfocus.com/archive/1/540957/100/0/threaded
- http://www.securityfocus.com/archive/1/archive/1/540957/100/0/threaded
- http://www.securityfocus.com/bid/91319
- http://www.securitytracker.com/id/1036088
- http://www.splunk.com/view/SP-CAAAPSV
- http://www.splunk.com/view/SP-CAAAPUE
- http://www.ubuntu.com/usn/USN-3087-1
- http://www.ubuntu.com/usn/USN-3087-2
- http://www.ubuntu.com/usn/USN-3181-1
- https://access.redhat.com/errata/RHSA-2017:0193
- https://access.redhat.com/errata/RHSA-2017:0194
- https://access.redhat.com/errata/RHSA-2017:1658
- https://access.redhat.com/security/cve/CVE-2016-2177
- https://bto.bluecoat.com/security-advisory/sa132
- https://bugzilla.redhat.com/show_bug.cgi?id=1341705
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=a004e72b95835136d3f1ea90517f706c24c03da7
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03763en_us
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448
- https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
- https://kc.mcafee.com/corporate/index?page=content&id=SB10165
- https://kc.mcafee.com/corporate/index?page=content&id=SB10215
- https://linux.oracle.com/cve/CVE-2016-2177.html
- https://linux.oracle.com/errata/ELSA-2016-3627.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-2177
- https://security.freebsd.org/advisories/FreeBSD-SA-16:26.openssl.asc
- https://security.gentoo.org/glsa/201612-16
- https://support.f5.com/csp/article/K23873366
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en&docId=emr_na-hpesbhf03856en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03856en_us
- https://ubuntu.com/security/notices/USN-3087-1
- https://ubuntu.com/security/notices/USN-3181-1
- https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24
- https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager
- https://www.cve.org/CVERecord?id=CVE-2016-2177
- https://www.openssl.org/blog/blog/2016/06/27/undefined-pointer-arithmetic/
- https://www.openssl.org/news/secadv/20160922.txt
- https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/
- https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/
- https://www.tenable.com/security/tns-2016-16
- https://www.tenable.com/security/tns-2016-20
- https://www.tenable.com/security/tns-2016-21