Every CVE Search/ Get API key

CVE-2016-2842

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before...

9.8 CriticalFix available

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

53.7%Up 46.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Record
CVE-2016-2842
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Record
CVE-2016-2842
Updated
2026-11-02
EUVDEUVD-2016-3915 No score

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Record
EUVD-2016-3915
Updated
2026-11-03
GitHub AdvisoriesGHSA-jj34-65xr-hwrp 9.8

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before...

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Record
GHSA-jj34-65xr-hwrp
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
OSVBELL-CVE-2016-2842 9.8

CVE-2016-2842 does not affect BellSoft software

Record
BELL-CVE-2016-2842
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Record
CVE-2016-2842
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2016-2842 9.8

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Record
DEBIAN-CVE-2016-2842
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:0722 5.6

Red Hat Security Advisory: openssl security update

Record
RHSA-2016:0722
CVSS 3.0
5.6 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2016:0996 5.6

Red Hat Security Advisory: openssl security update

Record
RHSA-2016:0996
CVSS 3.0
5.6 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2016:2073 5.6

Red Hat Security Advisory: openssl security update

Record
RHSA-2016:2073
CVSS 3.0
5.6 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2016-2842 9.8

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

Record
UBUNTU-CVE-2016-2842
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssl
Debian:12
 before 1.0.2g-1
1.0.2g-1
openssl
Debian:13
 before 1.0.2g-1
1.0.2g-1
openssl
Debian:14
 before 1.0.2g-1
1.0.2g-1
openssl
Debian:7
From an advisory covering 6 CVEs
 before 1.0.1e-2+deb7u20, plus listed versions
1.0.1e-21.0.1e-2+deb7u11.0.1e-2+deb7u101.0.1e-2+deb7u111.0.1e-2+deb7u12
Show 15 moreShow less
1.0.1e-2+deb7u131.0.1e-2+deb7u141.0.1e-2+deb7u151.0.1e-2+deb7u161.0.1e-2+deb7u171.0.1e-2+deb7u181.0.1e-2+deb7u191.0.1e-2+deb7u21.0.1e-2+deb7u31.0.1e-2+deb7u41.0.1e-2+deb7u51.0.1e-2+deb7u61.0.1e-2+deb7u71.0.1e-2+deb7u81.0.1e-2+deb7u9
1.0.1e-2+deb7u20
openssl
Debian:8
From an advisory covering 6 CVEs
 before 1.0.1k-3+deb8u4, plus listed versions
1.0.1k-31.0.1k-3+alpha1.0.1k-3+deb8u11.0.1k-3+deb8u21.0.1k-3+deb8u3
1.0.1k-3+deb8u4
openssl
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-perl
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
Show 51 moreShow less
Affected packages
PackageAffectedFixed
openssl-static
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-perl
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-static
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-perl
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-static
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-perl
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl-static
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 1:1.0.1e-51.el7_2.5
1:1.0.1e-51.el7_2.5
openssl
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-perl
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-static
Red Hat:enterprise_linux:6::client
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-perl
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-static
Red Hat:enterprise_linux:6::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-perl
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-static
Red Hat:enterprise_linux:6::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-perl
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl-static
Red Hat:enterprise_linux:6::workstation
From an advisory covering 7 CVEs
 before 0:1.0.1e-48.el6_8.1
0:1.0.1e-48.el6_8.1
openssl
Red Hat:rhel_eus:6.7::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-debuginfo
Red Hat:rhel_eus:6.7::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-devel
Red Hat:rhel_eus:6.7::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-perl
Red Hat:rhel_eus:6.7::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-static
Red Hat:rhel_eus:6.7::computenode
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl
Red Hat:rhel_eus:6.7::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-debuginfo
Red Hat:rhel_eus:6.7::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-devel
Red Hat:rhel_eus:6.7::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-perl
Red Hat:rhel_eus:6.7::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl-static
Red Hat:rhel_eus:6.7::server
From an advisory covering 7 CVEs
 before 0:1.0.1e-42.el6_7.5
0:1.0.1e-42.el6_7.5
openssl
Ubuntu:14.04:LTS
 before 1.0.1f-1ubuntu2.18, plus listed versions
1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu4
Show 14 moreShow less
1.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.11.0.1f-1ubuntu2.21.0.1f-1ubuntu2.31.0.1f-1ubuntu2.41.0.1f-1ubuntu2.51.0.1f-1ubuntu2.71.0.1f-1ubuntu2.81.0.1f-1ubuntu2.111.0.1f-1ubuntu2.121.0.1f-1ubuntu2.151.0.1f-1ubuntu2.161.0.1f-1ubuntu2.17
1.0.1f-1ubuntu2.18
openssl
Ubuntu:16.04:LTS
 before 1.0.2g-1ubuntu2, plus listed versions
1.0.2d-0ubuntu11.0.2d-0ubuntu21.0.2e-1ubuntu11.0.2f-2ubuntu1
1.0.2g-1ubuntu2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-2842 is a critical vulnerability (CVSS 9.8) in Openssl, published March 1, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 53.7%, the 98th percentile. Fixed in openssl 1.0.2g-1.

References

Show 62 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open