Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Out-of-bounds Read Vulnerability - CVE-2016-2180 - Vulnerability Database
OpenSSL

OpenSSL Out-of-bounds Read Vulnerability - CVE-2016-2180

High
Reference: CVE-2016-2180
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-2180
Title: OpenSSL Out-of-bounds Read Vulnerability
Overview:

The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the quotopenssl tsquot command.