CVE-2016-2182: Critical severity Google Android vulnerability

Published Aug 16, 2016
·
Updated

An out of bounds write flaw was discovered in the OpenSSL BNbn2dec() function. An attacker able to make an application using OpenSSL to process a large BIGNUM could cause the application to crash or, possibly, execute arbitrary code.

Other sources

An out-of-bounds write vulnerability was found to be caused by not checking errors in BNbn2dec(). If an oversize BIGNUM is presented to BNbn2dec() it can cause BNdivword() to fail and not reduce the value of 't' resulting in OOB writes to the bndata buffer and eventually crashing.

Upstream patch:

https://git.openssl.org/?p=openssl.git;a=commit;h=07bed46f332fce8c1d157689a2cdf915a982ae34

— Red Hat

The BNbn2dec function in crypto/bn/bnprint.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

Affected Software

58 affected componentsFixes available
redhat/jbcs-httpd24-apache-commons-daemon<0:1.1.0-1.redhat_2.1.jbcs.el6
0:1.1.0-1.redhat_2.1.jbcs.el6
redhat/jbcs-httpd24-apache-commons-daemon-jsvc<1:1.1.0-1.redhat_2.jbcs.el6
1:1.1.0-1.redhat_2.jbcs.el6
redhat/jbcs-httpd24-apr<0:1.6.3-14.jbcs.el6
0:1.6.3-14.jbcs.el6
redhat/jbcs-httpd24-apr-util<0:1.6.1-9.jbcs.el6
0:1.6.1-9.jbcs.el6
redhat/jbcs-httpd24-httpd<0:2.4.29-17.jbcs.el6
0:2.4.29-17.jbcs.el6
redhat/jbcs-httpd24-nghttp2<0:1.29.0-8.jbcs.el6
0:1.29.0-8.jbcs.el6
redhat/jbcs-httpd24-openssl<1:1.0.2n-11.jbcs.el6
1:1.0.2n-11.jbcs.el6
redhat/jbcs-httpd24-apache-commons-daemon<0:1.1.0-1.redhat_2.1.jbcs.el7
0:1.1.0-1.redhat_2.1.jbcs.el7
redhat/jbcs-httpd24-apache-commons-daemon-jsvc<1:1.1.0-1.redhat_2.jbcs.el7
1:1.1.0-1.redhat_2.jbcs.el7
redhat/jbcs-httpd24-apr<0:1.6.3-14.jbcs.el7
0:1.6.3-14.jbcs.el7
redhat/jbcs-httpd24-apr-util<0:1.6.1-9.jbcs.el7
0:1.6.1-9.jbcs.el7
redhat/jbcs-httpd24-httpd<0:2.4.29-17.jbcs.el7
0:2.4.29-17.jbcs.el7
redhat/jbcs-httpd24-nghttp2<0:1.29.0-8.jbcs.el7
0:1.29.0-8.jbcs.el7
redhat/jbcs-httpd24-openssl<1:1.0.2n-11.jbcs.el7
1:1.0.2n-11.jbcs.el7
redhat/openssl<0:1.0.1e-48.el6_8.3
0:1.0.1e-48.el6_8.3
redhat/openssl<1:1.0.1e-51.el7_2.7
1:1.0.1e-51.el7_2.7
redhat/openssl<1.0.1
1.0.1
redhat/openssl<1.0.2
1.0.2
Google Android
debian/openssl
1.1.1w-0+deb11u11.1.1w-0+deb11u23.0.15-1~deb12u13.0.14-1~deb12u23.4.1-1
HP IceWall Federation Agent=3.0
HP IceWall MCRP=3.0
HP IceWall SSO=10.0
HP IceWall SSO=10.0
HP IceWall SSO Agent Option=10.0
OpenSSL OpenSSL=1.0.1
OpenSSL OpenSSL=1.0.1a
OpenSSL OpenSSL=1.0.1b
OpenSSL OpenSSL=1.0.1c
OpenSSL OpenSSL=1.0.1d
OpenSSL OpenSSL=1.0.1e
OpenSSL OpenSSL=1.0.1f
OpenSSL OpenSSL=1.0.1g
OpenSSL OpenSSL=1.0.1h
OpenSSL OpenSSL=1.0.1i
OpenSSL OpenSSL=1.0.1j
OpenSSL OpenSSL=1.0.1k
OpenSSL OpenSSL=1.0.1l
OpenSSL OpenSSL=1.0.1m
OpenSSL OpenSSL=1.0.1n
OpenSSL OpenSSL=1.0.1o
OpenSSL OpenSSL=1.0.1p
OpenSSL OpenSSL=1.0.1q
OpenSSL OpenSSL=1.0.1r
OpenSSL OpenSSL=1.0.1s
OpenSSL OpenSSL=1.0.1t
OpenSSL OpenSSL=1.0.2
OpenSSL OpenSSL=1.0.2a
OpenSSL OpenSSL=1.0.2b
OpenSSL OpenSSL=1.0.2c
OpenSSL OpenSSL=1.0.2d
OpenSSL OpenSSL=1.0.2e
OpenSSL OpenSSL=1.0.2f
OpenSSL OpenSSL=1.0.2g
OpenSSL OpenSSL=1.0.2h
Oracle Linux=5
Oracle Linux=6
Oracle Linux=7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/jbcs-httpd24-apache-commons-daemon to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.redhat_2.1.jbcs.el6
  2. Upgrade

    Upgrade redhat/jbcs-httpd24-apache-commons-daemon-jsvc to a version that resolves this vulnerability.

    Fixed in 1:1.1.0-1.redhat_2.jbcs.el6
  3. Upgrade

    Upgrade redhat/jbcs-httpd24-apr to a version that resolves this vulnerability.

    Fixed in 0:1.6.3-14.jbcs.el6
  4. Upgrade

    Upgrade redhat/jbcs-httpd24-apr-util to a version that resolves this vulnerability.

    Fixed in 0:1.6.1-9.jbcs.el6
  5. Upgrade

    Upgrade redhat/jbcs-httpd24-httpd to a version that resolves this vulnerability.

    Fixed in 0:2.4.29-17.jbcs.el6
  6. Upgrade

    Upgrade redhat/jbcs-httpd24-nghttp2 to a version that resolves this vulnerability.

    Fixed in 0:1.29.0-8.jbcs.el6
  7. Upgrade

    Upgrade redhat/jbcs-httpd24-openssl to a version that resolves this vulnerability.

    Fixed in 1:1.0.2n-11.jbcs.el6
  8. Upgrade

    Upgrade redhat/jbcs-httpd24-apache-commons-daemon to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.redhat_2.1.jbcs.el7
  9. Upgrade

    Upgrade redhat/jbcs-httpd24-apache-commons-daemon-jsvc to a version that resolves this vulnerability.

    Fixed in 1:1.1.0-1.redhat_2.jbcs.el7
  10. Upgrade

    Upgrade redhat/jbcs-httpd24-apr to a version that resolves this vulnerability.

    Fixed in 0:1.6.3-14.jbcs.el7
  11. Upgrade

    Upgrade redhat/jbcs-httpd24-apr-util to a version that resolves this vulnerability.

    Fixed in 0:1.6.1-9.jbcs.el7
  12. Upgrade

    Upgrade redhat/jbcs-httpd24-httpd to a version that resolves this vulnerability.

    Fixed in 0:2.4.29-17.jbcs.el7
  13. Upgrade

    Upgrade redhat/jbcs-httpd24-nghttp2 to a version that resolves this vulnerability.

    Fixed in 0:1.29.0-8.jbcs.el7
  14. Upgrade

    Upgrade redhat/jbcs-httpd24-openssl to a version that resolves this vulnerability.

    Fixed in 1:1.0.2n-11.jbcs.el7
  15. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 0:1.0.1e-48.el6_8.3
  16. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 1:1.0.1e-51.el7_2.7
  17. Upgrade

    Upgrade debian/openssl to a version that resolves this vulnerability.

    Fixed in 1.1.1w-0+deb11u1Fixed in 1.1.1w-0+deb11u2Fixed in 3.0.15-1~deb12u1Fixed in 3.0.14-1~deb12u2Fixed in 3.4.1-1
  18. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 1.0.1
  19. Upgrade

    Upgrade redhat/openssl to a version that resolves this vulnerability.

    Fixed in 1.0.2
  20. Upgrade

    Upgrade debian/openssl to a version that resolves this vulnerability.

    Fixed in 1.1.1w-0+deb11u1
  21. Upgrade

    Upgrade debian/openssl to a version that resolves this vulnerability.

    Fixed in 1.1.1w-0+deb11u2
  22. Upgrade

    Upgrade debian/openssl to a version that resolves this vulnerability.

    Fixed in 3.0.15-1~deb12u1
  23. Upgrade

    Upgrade debian/openssl to a version that resolves this vulnerability.

    Fixed in 3.0.14-1~deb12u2
  24. Upgrade

    Upgrade debian/openssl to a version that resolves this vulnerability.

    Fixed in 3.4.1-1
  25. Upgrade

    Upgrade OpenSSL to a version that resolves this vulnerability.

    Patch 07bed46f332fce8c1d157689a2cdf915a982ae34

Event History

Aug 16, 2016
CVE Published
12:00 AM
Data Sourced
via Red Hat·08:54 AM
DescriptionSeverityAffected Software
Sep 16, 2016
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:16 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:12 AM
RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2016-2182?

CVE-2016-2182 has a high severity rating due to its potential to allow an attacker to crash an application or execute arbitrary code.

2

How do I fix CVE-2016-2182?

To fix CVE-2016-2182, update your OpenSSL package to a version that is patched against this vulnerability.

3

Which software is affected by CVE-2016-2182?

CVE-2016-2182 affects various Red Hat packages including jbcs-httpd24-apache-commons-daemon and openssl among others.

4

What types of attacks can CVE-2016-2182 facilitate?

CVE-2016-2182 can facilitate denial of service attacks by crashing applications or may allow for arbitrary code execution.

5

Is there a recommended version to upgrade to for CVE-2016-2182?

Recommended versions to upgrade to include OpenSSL 1.1.0 or later, which addresses the issues posed by CVE-2016-2182.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203