Out-of-bounds read In openssl
Description
Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.2 | 1.0.2h-r0 | ||
alpine v3.5 | 1.0.2h-r0 | ||
alpine v3.7 | 1.0.2h-r0 | ||
alpine v3.4 | 1.0.2h-r0 | ||
alpine v3.6 | 1.0.2h-r0 | ||
alpine v3.8 | 1.0.2h-r0 | ||
alpine v3.3 | 1.0.2h-r0 | ||
 debian 12 | 1.0.2h-1 | ||
debian 13 | 1.0.2h-1 | ||
debian 14 | 1.0.2h-1 |
1-10 of 17
10
Aliases
1. 2. 3. 4. 5. 6. 7.