Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Integer Overflow or Wraparound Vulnerability - CVE-2016-2177 - Vulnerability Database
OpenSSL

OpenSSL Integer Overflow or Wraparound Vulnerability - CVE-2016-2177

Critical
Reference: CVE-2016-2177
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-2177
Title: OpenSSL Integer Overflow or Wraparound Vulnerability
Overview:

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior related to s3_srvr.c ssl_sess.c and t1_lib.c.