VDB
BDU%3A2020-02963
BDU%3A2020-02963
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции asn1_d2i_read_bio (crypto/asn1/a_d2i_fp.c) библиотеки OpenSSL, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Canonical Ltd., Red Hat Inc., Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», OpenSSL Software Foundation | openSUSE, Ubuntu, SUSE OpenStack Cloud, Suse Linux Enterprise Server, Red Hat Enterprise Linux, Debian GNU/Linux, OpenSUSE Leap, Suse Linux Enterprise Desktop, SUSE Linux Enterprise Software Development Kit, SUSE Linux Enterprise Server for SAP Applications, Astra Linux Common Edition (запись в едином реестре российских программ №4433), SUSE Linux Enterprise Module for Basesystem, SUSE Studio Onsite, SUSE Linux Enterprise Module for Legacy Software, JBoss Enterprise Application Platform, SUSE Linux Enterprise High Performance Computing, SUSE Manager, SUSE Manager Proxy, openSUSE Tumbleweed, SUSE Linux Enterprise Module for Containers, Red Hat JBoss Enterprise Web Server, SUSE Linux Enterprise Server for Raspberry Pi, JBoss Core Services, Jboss Web Server, OpenSSL |
Timeline
- Jun 26, 2020 CVE Published
References
- https://usn.ubuntu.com/2959-1/ advisory
- https://www.suse.com/security/cve/CVE-2016-2109/ url
- https://access.redhat.com/security/cve/CVE-2016-2109 url
- https://www.openssl.org/news/secadv/20160503.txt url
- https://nvd.nist.gov/vuln/detail/CVE-2016-2109 url
- https://security-tracker.debian.org/tracker/CVE-2016-2109 url