CNVD-2016-02676 | Vulnetix

CNVD-2016-02676 PUBLISHED

Record from circl · Published May 4, 2016

OpenSSL是一个实现安全套接层和安全传输层协议的通用开源加密库，可支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL EBCDIC存在越界读漏洞。当程序使用EBCDIC系统X509_NAME_oneline（）函数，ASN1字符串超过1024字节可导致越界读，进而可导致在缓冲区返回任意堆栈的数据。

Timeline

May 4, 2016 CVE Published
Oct 2, 2020 PoC Published (7 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2016-02676
vulnetix vdb fixes CNVD-2016-02676

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2016-02676/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →