Skip to content
OpenAdvisories
Unscored DSA-3500-1 6 CVEs

openssl - security update

Published Mar 1, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 openssl 1.0.1e-2+deb7u20
Debian · 8 openssl 1.0.1k-3+deb8u4

Vulnerabilities 6

  • Unscored —
    CVE-2016-0702 Public exploit

    The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2…

  • Unscored —
    CVE-2016-0705 EPSS 26%

    Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and …

  • Unscored —
    CVE-2016-0797 EPSS 27%

    Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a den…

  • Unscored —
    CVE-2016-0798 EPSS 24%

    Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows r…

  • Unscored —
    CVE-2016-0799 EPSS 32%

    The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculate…

  • Unscored —
    CVE-2016-2842 EPSS 54%

    The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify…