Description

Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

Remediation

References

CVE-2016-2106

Related Vulnerabilities

ReviveAdserver Other Vulnerability (CVE-2014-8875)

Vanilla Forums Deserialization of Untrusted Data Vulnerability (CVE-2018-19499)

WordPress Plugin Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list CSV Injection (2.0.68)

WordPress Plugin Gallery-Flagallery Photo Portfolio 'skin' Parameter Cross-Site Scripting (1.72)

WordPress Plugin FG PrestaShop to WooCommerce Cross-Site Scripting (3.19.1)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CVE-2016-2106