{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2016-6303","sourceIdentifier":"secalert@redhat.com","published":"2016-09-16T05:59:13.363","lastModified":"2026-06-17T00:50:47.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors."},{"lang":"es","value":"Desbordamiento de entero en la función MDC2_Update en crypto/mdc2/mdc2dgst.c en OpenSSL en versiones anteriores a 1.1.0 permite a atacantes remotos provocar una denegación de servicio (escritura fuera de límites y caída de aplicación) o tener otro posible impacto no especificado a través de vectores desconocidos."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionEndExcluding":"0.12.16","matchCriteriaId":"8AA619F9-88D2-4FF6-BCC4-320A2C332E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.6.0","matchCriteriaId":"4AC51255-7A8E-45C1-95F9-FC8A15500188"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.6.0","matchCriteriaId":"6A373B08-DC13-4524-9A9C-989684868C80"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D1C00C0-C77E-4255-9ECA-20F2673C7366"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"3A66E6CF-39CF-412E-8EF0-8E10BA21B4A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"C684FB18-FDDC-4BED-A28C-C23EE6CD0094"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"A74A79A7-4FAF-4C81-8622-050008B96AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","matchCriteriaId":"CEDACCB9-8D61-49EE-9957-9E58BC7BB031"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","matchCriteriaId":"4993DD56-F9E3-4AC8-AC3E-BF204B950DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","matchCriteriaId":"E884B241-F9C3-44F8-A420-DE65F5F3D660"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","matchCriteriaId":"3A383620-B4F7-44A7-85DA-A4FF2E115D80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","matchCriteriaId":"5F0C6812-F455-49CF-B29B-9AC00306DA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","matchCriteriaId":"3F2D462C-A1B4-4572-A615-BDE9DC5F1E55"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","matchCriteriaId":"3703E445-17C0-4C85-A496-A35641C0C8DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","matchCriteriaId":"2F4034B9-EF1C-40E6-B92A-D4D7B7E7E774"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","matchCriteriaId":"ABEC1927-F469-4B9E-B544-DA6CF90F0B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:*","matchCriteriaId":"DE2188F9-FAF8-4A0C-BB49-E95BDBC119BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:*","matchCriteriaId":"A9EC827B-5313-47D7-BF49-CFF033CF3D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:*","matchCriteriaId":"A438E65F-33B1-46BC-AD93-200DCC6B43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:*","matchCriteriaId":"4BFDCF78-62C1-429E-A43C-0C9FEC14837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*","matchCriteriaId":"6A0B4DEF-C6E8-4243-9893-6E650013600C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:*","matchCriteriaId":"E28CD4F7-522F-4ECA-9035-228596CDE769"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*","matchCriteriaId":"A491B32F-31F0-4151-AE9B-313CBF2C060D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"0AF4953B-BB23-4C80-8C48-9E94EB234AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3E5C1B-EC63-4214-A0BD-0B8681CE6C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"60F946FD-F564-49DA-B043-5943308BA9EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","matchCriteriaId":"4847BCF3-EFCE-41AF-8E7D-3D51EB9DCC5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","matchCriteriaId":"9B89180B-FB68-4DD8-B076-16E51CC7FB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","matchCriteriaId":"4C986592-4086-4A39-9767-EF34DBAA6A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","matchCriteriaId":"7B23181C-03DB-4E92-B3F6-6B585B5231B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","matchCriteriaId":"94D9EC1C-4843-4026-9B05-E060E9391734"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","matchCriteriaId":"B066401C-21CF-4BE9-9C55-C9F1E0C7BE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","matchCriteriaId":"036FB24F-7D86-4730-8BC9-722875BEC807"}]}]}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92984","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370146","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"secalert@redhat.com"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=55d83bf7c10c7b205fffa23fa7c3977491e56c07","source":"secalert@redhat.com"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21995039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/92984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bto.bluecoat.com/security-advisory/sa132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1370146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=55d83bf7c10c7b205fffa23fa7c3977491e56c07","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:26.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/tns-2016-21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}