CVE-2016-0705
Fixed in a distro release EPSS 26%
Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
Products: oracle mysql, openssl, google android, canonical ubuntu_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 1.0.2g-1 |
| Debian 13 | openssl | 1.0.2g-1 |
| Debian 14 | openssl | 1.0.2g-1 |
| Debian 7 | openssl | 1.0.1e-2+deb7u20 |
| Debian 8 | openssl | 1.0.1k-3+deb8u4 |
| Red Hat Enterprise Linux 6 | openssl | 0:1.0.1e-42.el6_7.4 |
| Red Hat Enterprise Linux 6 | openssl-debuginfo | 0:1.0.1e-42.el6_7.4 |
| Red Hat Enterprise Linux 6 | openssl-devel | 0:1.0.1e-42.el6_7.4 |
| Red Hat Enterprise Linux 6 | openssl-perl | 0:1.0.1e-42.el6_7.4 |
| Red Hat Enterprise Linux 6 | openssl-static | 0:1.0.1e-42.el6_7.4 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor7 | 0:7.2-20160302.1.el6ev |
| Red Hat Enterprise Linux 7 | openssl | 1:1.0.1e-51.el7_2.4 |
| Red Hat Enterprise Linux 7 | openssl-debuginfo | 1:1.0.1e-51.el7_2.4 |
| Red Hat Enterprise Linux 7 | openssl-devel | 1:1.0.1e-51.el7_2.4 |
| Red Hat Enterprise Linux 7 | openssl-libs | 1:1.0.1e-51.el7_2.4 |
| Red Hat Enterprise Linux 7 | openssl-perl | 1:1.0.1e-51.el7_2.4 |
| Red Hat Enterprise Linux 7 | openssl-static | 1:1.0.1e-51.el7_2.4 |
| Red Hat Enterprise Linux 7 | rhev-hypervisor7 | 0:7.2-20160302.1.el7ev |
| Red Hat network satellite 5.8 | java-1.8.0-ibm | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat network satellite 5.8 | java-1.8.0-ibm-devel | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-demo | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-devel | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-plugin | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat rhel extras 6 | java-1.8.0-ibm-src | 1:1.8.0.5.20-1jpp.1.el6_10 |
| Red Hat rhel extras 7 | java-1.8.0-ibm | 1:1.8.0.5.20-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-demo | 1:1.8.0.5.20-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-devel | 1:1.8.0.5.20-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-jdbc | 1:1.8.0.5.20-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-plugin | 1:1.8.0.5.20-1jpp.1.el7 |
| Red Hat rhel extras 7 | java-1.8.0-ibm-src | 1:1.8.0.5.20-1jpp.1.el7 |
| SUSE Enterprise Storage 4 | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | openssl | 0.9.8j-0.89.1 |
| SUSE Linux Enterprise Desktop 12 | openssl | 1.0.1i-27.13.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | openssl | 1.0.1i-44.1 |
| SUSE Linux Enterprise Module for Legacy 15 | java-1_8_0-ibm | 1.8.0_sr5.20-3.6.2 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | openssl | 0.9.8j-0.89.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | openssl | 0.9.8j-0.89.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | openssl | 0.9.8j-0.89.1 |
| SUSE Linux Enterprise Server 11 SP4 | openssl | 0.9.8j-0.89.1 |
| SUSE Linux Enterprise Server 11-SECURITY | openssl1 | 1.0.1g-0.40.1 |
| SUSE Linux Enterprise Server 12 | openssl | 1.0.1i-27.13.1 |
| SUSE Linux Enterprise Server 12 SP1 | openssl | 1.0.1i-44.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Server 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | openssl | 0.9.8j-0.89.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | openssl | 1.0.1i-27.13.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | openssl | 1.0.1i-44.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | openssl | 0.9.8j-0.89.1 |
| SUSE Linux Enterprise Software Development Kit 12 | openssl | 1.0.1i-27.13.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | openssl | 1.0.1i-44.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Manager 2.1 | openssl | 0.9.8j-0.91.1 |
| SUSE Manager Proxy 2.1 | openssl | 0.9.8j-0.91.1 |
| SUSE OpenStack Cloud 5 | openssl | 0.9.8j-0.91.1 |
| SUSE OpenStack Cloud 7 | java-1_8_0-ibm | 1.8.0_sr5.20-30.36.1 |
| SUSE Studio Onsite 1.3 | openssl | 0.9.8j-0.89.1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.18 |
| Ubuntu 16.04 LTS | openssl | 1.0.2g-1ubuntu2 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 |