CVE-2016-2182

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

Loading…

Severity

Moderate

Red Hat Product Security

6.2

CVSS 3.0

Review impact separately from score.

Published · August 16, 2016

Updated · September 21, 2026

Description

An out of bounds write flaw was discovered in the OpenSSL BN_bn2dec() function. An attacker able to make an application using OpenSSL to process a large BIGNUM could cause the application to crash or, possibly, execute arbitrary code.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 6.2
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 2.0 · 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-391 · Unchecked Error Condition