CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2016-2182

CVSS 9.8v3.0pub. 2016-09-16upd. 2026-05-06

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • HP Icewall Federation Agent

    APP
    Hp
    3.0

  • HP Icewall Mcrp

    APP
    Hp
    3.0

  • HP Icewall Sso

    APP
    Hp
    10.0

  • HP Icewall Sso Agent Option

    APP
    Hp
    10.0

  • OpenSSL

    APP
    Openssl
    1.0.11.0.1a1.0.1b1.0.1c1.0.1d1.0.1e1.0.1f1.0.1g1.0.1h1.0.1i1.0.1j1.0.1k1.0.1l1.0.1m1.0.1n+ 15 more

  • Oracle Linux

    OS
    Oracle
    567
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2016-3427CRITICAL9.8⚠ KEVPL ✓same product

Krytyczna podatność RCE w Oracle Java SE i JRockit — komponent JMX

CVE-2014-7169CRITICAL9.8⚠ KEVPL ✓same product

GNU Bash — niekompletna łatka Shellshock umożliwia command injection (CVE-2014-7169)

CVE-2014-6271CRITICAL9.8⚠ KEVPL ✓same product

ShellShock — RCE poprzez zmienne środowiskowe w GNU Bash

CVE-2026-34182CRITICAL9.1PL ✓same product

OpenSSL CMS AuthEnvelopedData — niewystarczająca walidacja wejścia umożliwia atak oracle i bypass integralnośc...

CVE-2026-31789CRITICAL9.8PL ✓same product

OpenSSL: heap buffer overflow przy konwersji OCTET STRING na hex (32-bit)