Out-of-bounds read In openssl
Description
The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.2 | =0.9.8i-r0 || =0.9.8j-r0 || =0.9.8k-r0 || =0.9.8k-r1 || =0.9.8k-r2 || =0.9.8k-r3 || =0.9.8k-r4 || =0.9.8k-r5 || =0.9.8k-r6 || =0.9.8k-r7 || =0.9.8l-r0 || =0.9.8l-r1 || =0.9.8m-r0 || =0.9.8n-r0 || =0.9.8n-r1 || =1.0.0-r0 || =1.0.0a-r0 || =1.0.0a-r1 || =1.0.0a-r2 || =1.0.0a-r3 || =1.0.0a-r4 || =1.0.0b-r0 || =1.0.0c-r0 || =1.0.0d-r0 || =1.0.0e-r0 || =1.0.0f-r0 || =1.0.0g-r0 || =1.0.0h-r0 || =1.0.1-r0 || =1.0.1a-r0 || =1.0.1b-r0 || =1.0.1c-r0 || =1.0.1c-r1 || =1.0.1c-r2 || =1.0.1c-r3 || =1.0.1d-r0 || =1.0.1d-r1 || =1.0.1e-r0 || =1.0.1e-r1 || =1.0.1e-r2 || =1.0.1e-r3 || =1.0.1e-r4 || =1.0.1e-r5 || =1.0.1e-r6 || =1.0.1e-r7 || =1.0.1f-r0 || =1.0.1g-r0 || =1.0.1g-r1 || =1.0.1g-r2 || =1.0.1g-r3 || =1.0.1h-r0 || =1.0.1i-r0 || =1.0.1i-r1 || =1.0.1i-r2 || =1.0.1i-r3 || =1.0.1j-r0 || =1.0.1k-r0 || =1.0.1l-r0 || =1.0.2-r0 || =1.0.2a-r0 || =1.0.2a-r1 || =1.0.2b-r0 || =1.0.2c-r0 || =1.0.2d-r0 || =1.0.2e-r0 || =1.0.2f-r0 || =1.0.2g-r0 || >=0 <1.0.2h-r0 | 1.0.2h-r0 | |
alpine v3.3 | =0.9.8i-r0 || =0.9.8j-r0 || =0.9.8k-r0 || =0.9.8k-r1 || =0.9.8k-r2 || =0.9.8k-r3 || =0.9.8k-r4 || =0.9.8k-r5 || =0.9.8k-r6 || =0.9.8k-r7 || =0.9.8l-r0 || =0.9.8l-r1 || =0.9.8m-r0 || =0.9.8n-r0 || =0.9.8n-r1 || =1.0.0-r0 || =1.0.0a-r0 || =1.0.0a-r1 || =1.0.0a-r2 || =1.0.0a-r3 || =1.0.0a-r4 || =1.0.0b-r0 || =1.0.0c-r0 || =1.0.0d-r0 || =1.0.0e-r0 || =1.0.0f-r0 || =1.0.0g-r0 || =1.0.0h-r0 || =1.0.1-r0 || =1.0.1a-r0 || =1.0.1b-r0 || =1.0.1c-r0 || =1.0.1c-r1 || =1.0.1c-r2 || =1.0.1c-r3 || =1.0.1d-r0 || =1.0.1d-r1 || =1.0.1e-r0 || =1.0.1e-r1 || =1.0.1e-r2 || =1.0.1e-r3 || =1.0.1e-r4 || =1.0.1e-r5 || =1.0.1e-r6 || =1.0.1e-r7 || =1.0.1f-r0 || =1.0.1g-r0 || =1.0.1g-r1 || =1.0.1g-r2 || =1.0.1g-r3 || =1.0.1h-r0 || =1.0.1i-r0 || =1.0.1i-r1 || =1.0.1i-r2 || =1.0.1i-r3 || =1.0.1j-r0 || =1.0.1k-r0 || =1.0.1l-r0 || =1.0.2-r0 || =1.0.2a-r0 || =1.0.2a-r1 || =1.0.2b-r0 || =1.0.2c-r0 || =1.0.2d-r0 || =1.0.2e-r0 || =1.0.2f-r0 || =1.0.2g-r0 || >=0 <1.0.2h-r0 | 1.0.2h-r0 | |
alpine v3.5 | =0.9.8i-r0 || =0.9.8j-r0 || =0.9.8k-r0 || =0.9.8k-r1 || =0.9.8k-r2 || =0.9.8k-r3 || =0.9.8k-r4 || =0.9.8k-r5 || =0.9.8k-r6 || =0.9.8k-r7 || =0.9.8l-r0 || =0.9.8l-r1 || =0.9.8m-r0 || =0.9.8n-r0 || =0.9.8n-r1 || =1.0.0-r0 || =1.0.0a-r0 || =1.0.0a-r1 || =1.0.0a-r2 || =1.0.0a-r3 || =1.0.0a-r4 || =1.0.0b-r0 || =1.0.0c-r0 || =1.0.0d-r0 || =1.0.0e-r0 || =1.0.0f-r0 || =1.0.0g-r0 || =1.0.0h-r0 || =1.0.1-r0 || =1.0.1a-r0 || =1.0.1b-r0 || =1.0.1c-r0 || =1.0.1c-r1 || =1.0.1c-r2 || =1.0.1c-r3 || =1.0.1d-r0 || =1.0.1d-r1 || =1.0.1e-r0 || =1.0.1e-r1 || =1.0.1e-r2 || =1.0.1e-r3 || =1.0.1e-r4 || =1.0.1e-r5 || =1.0.1e-r6 || =1.0.1e-r7 || =1.0.1f-r0 || =1.0.1g-r0 || =1.0.1g-r1 || =1.0.1g-r2 || =1.0.1g-r3 || =1.0.1h-r0 || =1.0.1i-r0 || =1.0.1i-r1 || =1.0.1i-r2 || =1.0.1i-r3 || =1.0.1j-r0 || =1.0.1k-r0 || =1.0.1l-r0 || =1.0.2-r0 || =1.0.2a-r0 || =1.0.2a-r1 || =1.0.2b-r0 || =1.0.2c-r0 || =1.0.2d-r0 || =1.0.2e-r0 || =1.0.2e-r1 || =1.0.2f-r0 || =1.0.2f-r1 || =1.0.2f-r2 || =1.0.2g-r0 || =1.0.2g-r1 || =1.0.2g-r2 || =1.0.2g-r3 || >=0 <1.0.2h-r0 | 1.0.2h-r0 | |
alpine v3.6 | =0.9.8i-r0 || =0.9.8j-r0 || =0.9.8k-r0 || =0.9.8k-r1 || =0.9.8k-r2 || =0.9.8k-r3 || =0.9.8k-r4 || =0.9.8k-r5 || =0.9.8k-r6 || =0.9.8k-r7 || =0.9.8l-r0 || =0.9.8l-r1 || =0.9.8m-r0 || =0.9.8n-r0 || =0.9.8n-r1 || =1.0.0-r0 || =1.0.0a-r0 || =1.0.0a-r1 || =1.0.0a-r2 || =1.0.0a-r3 || =1.0.0a-r4 || =1.0.0b-r0 || =1.0.0c-r0 || =1.0.0d-r0 || =1.0.0e-r0 || =1.0.0f-r0 || =1.0.0g-r0 || =1.0.0h-r0 || =1.0.1-r0 || =1.0.1a-r0 || =1.0.1b-r0 || =1.0.1c-r0 || =1.0.1c-r1 || =1.0.1c-r2 || =1.0.1c-r3 || =1.0.1d-r0 || =1.0.1d-r1 || =1.0.1e-r0 || =1.0.1e-r1 || =1.0.1e-r2 || =1.0.1e-r3 || =1.0.1e-r4 || =1.0.1e-r5 || =1.0.1e-r6 || =1.0.1e-r7 || =1.0.1f-r0 || =1.0.1g-r0 || =1.0.1g-r1 || =1.0.1g-r2 || =1.0.1g-r3 || =1.0.1h-r0 || =1.0.1i-r0 || =1.0.1i-r1 || =1.0.1i-r2 || =1.0.1i-r3 || =1.0.1j-r0 || =1.0.1k-r0 || =1.0.1l-r0 || =1.0.2-r0 || =1.0.2a-r0 || =1.0.2a-r1 || =1.0.2b-r0 || =1.0.2c-r0 || =1.0.2d-r0 || =1.0.2e-r0 || =1.0.2e-r1 || =1.0.2f-r0 || =1.0.2f-r1 || =1.0.2f-r2 || =1.0.2g-r0 || =1.0.2g-r1 || =1.0.2g-r2 || =1.0.2g-r3 || >=0 <1.0.2h-r0 | 1.0.2h-r0 | |
alpine v3.7 | =0.9.8i-r0 || =0.9.8j-r0 || =0.9.8k-r0 || =0.9.8k-r1 || =0.9.8k-r2 || =0.9.8k-r3 || =0.9.8k-r4 || =0.9.8k-r5 || =0.9.8k-r6 || =0.9.8k-r7 || =0.9.8l-r0 || =0.9.8l-r1 || =0.9.8m-r0 || =0.9.8n-r0 || =0.9.8n-r1 || =1.0.0-r0 || =1.0.0a-r0 || =1.0.0a-r1 || =1.0.0a-r2 || =1.0.0a-r3 || =1.0.0a-r4 || =1.0.0b-r0 || =1.0.0c-r0 || =1.0.0d-r0 || =1.0.0e-r0 || =1.0.0f-r0 || =1.0.0g-r0 || =1.0.0h-r0 || =1.0.1-r0 || =1.0.1a-r0 || =1.0.1b-r0 || =1.0.1c-r0 || =1.0.1c-r1 || =1.0.1c-r2 || =1.0.1c-r3 || =1.0.1d-r0 || =1.0.1d-r1 || =1.0.1e-r0 || =1.0.1e-r1 || =1.0.1e-r2 || =1.0.1e-r3 || =1.0.1e-r4 || =1.0.1e-r5 || =1.0.1e-r6 || =1.0.1e-r7 || =1.0.1f-r0 || =1.0.1g-r0 || =1.0.1g-r1 || =1.0.1g-r2 || =1.0.1g-r3 || =1.0.1h-r0 || =1.0.1i-r0 || =1.0.1i-r1 || =1.0.1i-r2 || =1.0.1i-r3 || =1.0.1j-r0 || =1.0.1k-r0 || =1.0.1l-r0 || =1.0.2-r0 || =1.0.2a-r0 || =1.0.2a-r1 || =1.0.2b-r0 || =1.0.2c-r0 || =1.0.2d-r0 || =1.0.2e-r0 || =1.0.2e-r1 || =1.0.2f-r0 || =1.0.2f-r1 || =1.0.2f-r2 || =1.0.2g-r0 || =1.0.2g-r1 || =1.0.2g-r2 || =1.0.2g-r3 || >=0 <1.0.2h-r0 | 1.0.2h-r0 | |
alpine v3.8 | =0.9.8i-r0 || =0.9.8j-r0 || =0.9.8k-r0 || =0.9.8k-r1 || =0.9.8k-r2 || =0.9.8k-r3 || =0.9.8k-r4 || =0.9.8k-r5 || =0.9.8k-r6 || =0.9.8k-r7 || =0.9.8l-r0 || =0.9.8l-r1 || =0.9.8m-r0 || =0.9.8n-r0 || =0.9.8n-r1 || =1.0.0-r0 || =1.0.0a-r0 || =1.0.0a-r1 || =1.0.0a-r2 || =1.0.0a-r3 || =1.0.0a-r4 || =1.0.0b-r0 || =1.0.0c-r0 || =1.0.0d-r0 || =1.0.0e-r0 || =1.0.0f-r0 || =1.0.0g-r0 || =1.0.0h-r0 || =1.0.1-r0 || =1.0.1a-r0 || =1.0.1b-r0 || =1.0.1c-r0 || =1.0.1c-r1 || =1.0.1c-r2 || =1.0.1c-r3 || =1.0.1d-r0 || =1.0.1d-r1 || =1.0.1e-r0 || =1.0.1e-r1 || =1.0.1e-r2 || =1.0.1e-r3 || =1.0.1e-r4 || =1.0.1e-r5 || =1.0.1e-r6 || =1.0.1e-r7 || =1.0.1f-r0 || =1.0.1g-r0 || =1.0.1g-r1 || =1.0.1g-r2 || =1.0.1g-r3 || =1.0.1h-r0 || =1.0.1i-r0 || =1.0.1i-r1 || =1.0.1i-r2 || =1.0.1i-r3 || =1.0.1j-r0 || =1.0.1k-r0 || =1.0.1l-r0 || =1.0.2-r0 || =1.0.2a-r0 || =1.0.2a-r1 || =1.0.2b-r0 || =1.0.2c-r0 || =1.0.2d-r0 || =1.0.2e-r0 || =1.0.2e-r1 || =1.0.2f-r0 || =1.0.2f-r1 || =1.0.2f-r2 || =1.0.2g-r0 || =1.0.2g-r1 || =1.0.2g-r2 || =1.0.2g-r3 || >=0 <1.0.2h-r0 | 1.0.2h-r0 | |
alpine v3.4 | =0.9.8i-r0 || =0.9.8j-r0 || =0.9.8k-r0 || =0.9.8k-r1 || =0.9.8k-r2 || =0.9.8k-r3 || =0.9.8k-r4 || =0.9.8k-r5 || =0.9.8k-r6 || =0.9.8k-r7 || =0.9.8l-r0 || =0.9.8l-r1 || =0.9.8m-r0 || =0.9.8n-r0 || =0.9.8n-r1 || =1.0.0-r0 || =1.0.0a-r0 || =1.0.0a-r1 || =1.0.0a-r2 || =1.0.0a-r3 || =1.0.0a-r4 || =1.0.0b-r0 || =1.0.0c-r0 || =1.0.0d-r0 || =1.0.0e-r0 || =1.0.0f-r0 || =1.0.0g-r0 || =1.0.0h-r0 || =1.0.1-r0 || =1.0.1a-r0 || =1.0.1b-r0 || =1.0.1c-r0 || =1.0.1c-r1 || =1.0.1c-r2 || =1.0.1c-r3 || =1.0.1d-r0 || =1.0.1d-r1 || =1.0.1e-r0 || =1.0.1e-r1 || =1.0.1e-r2 || =1.0.1e-r3 || =1.0.1e-r4 || =1.0.1e-r5 || =1.0.1e-r6 || =1.0.1e-r7 || =1.0.1f-r0 || =1.0.1g-r0 || =1.0.1g-r1 || =1.0.1g-r2 || =1.0.1g-r3 || =1.0.1h-r0 || =1.0.1i-r0 || =1.0.1i-r1 || =1.0.1i-r2 || =1.0.1i-r3 || =1.0.1j-r0 || =1.0.1k-r0 || =1.0.1l-r0 || =1.0.2-r0 || =1.0.2a-r0 || =1.0.2a-r1 || =1.0.2b-r0 || =1.0.2c-r0 || =1.0.2d-r0 || =1.0.2e-r0 || =1.0.2e-r1 || =1.0.2f-r0 || =1.0.2f-r1 || =1.0.2f-r2 || =1.0.2g-r0 || =1.0.2g-r1 || =1.0.2g-r2 || =1.0.2g-r3 || >=0 <1.0.2h-r0 | 1.0.2h-r0 |
Aliases
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.