VDB
BDU%3A2020-02961
BDU%3A2020-02961
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции EVP_EncodeUpdate (crypto/evp/evp_enc.c) библиотеки OpenSSL, связанная с ошибкой при обработке числа, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Red Hat Inc., Fedora Project, Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», OpenSSL Software Foundation | openSUSE, SUSE OpenStack Cloud, Suse Linux Enterprise Server, Red Hat Enterprise Linux, Fedora, Debian GNU/Linux, OpenSUSE Leap, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Software Development Kit, SUSE Linux Enterprise Server for SAP Applications, Astra Linux Common Edition (запись в едином реестре российских программ №4433), SUSE Linux Enterprise Module for Basesystem, SUSE Studio Onsite, SUSE Linux Enterprise Module for Legacy Software, JBoss Enterprise Application Platform, SUSE Linux Enterprise High Performance Computing, SUSE Manager, SUSE Manager Proxy, openSUSE Tumbleweed, SUSE Linux Enterprise Module for Containers, Red Hat JBoss Enterprise Web Server, SUSE Linux Enterprise Server for Raspberry Pi, JBoss Core Services, Jboss Web Server, OpenSSL |
Timeline
- Jun 26, 2020 CVE Published
References
- https://lists.fedoraproject.org/pipermail/package-announce/2016-May/184605.html url
- https://lists.fedoraproject.org/pipermail/package-announce/2016-May/183607.html url
- https://lists.fedoraproject.org/pipermail/package-announce/2016-May/183457.html url
- https://access.redhat.com/security/cve/cve-2016-2106 url
- https://www.suse.com/security/cve/CVE-2016-2106/ url
- https://www.openssl.org/news/secadv/20160503.txt url
- https://nvd.nist.gov/vuln/detail/CVE-2016-2106 url
- https://security-tracker.debian.org/tracker/CVE-2016-2106 url