Back

CRITICAL

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

Published Sep 16, 2016

Description

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (57)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Sep 16, 2016
Updated Aug 5, 2024
Reserved Jan 29, 2016
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Aug 16, 2016