Description
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 1.0.2i-1 | — |
| Debian 13 | openssl | 1.0.2i-1 | — |
| Debian 12 | openssl | 1.0.2i-1 | — |
| Debian 8 | openssl | 1.0.1t-1+deb8u4 | DSA-3673-1 |
| Debian 7 | openssl | 1.0.1t-1+deb7u1 | DLA-637-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | openssl | 1.0.2g-1ubuntu4.4 | USN-3087-1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.20 | USN-3087-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | compat-openssl098 | 0.9.8j-102.1 | SUSE-SU-2016:2468-1 |
| SLES 12 SP1 | openssl | 1.0.1i-52.1 | SUSE-SU-2016:2394-1 |
| SLES 12 | compat-openssl098 | 0.9.8j-102.1 | SUSE-SU-2016:2468-1 |
| SLES 12 | openssl | 1.0.1i-27.21.1 | SUSE-SU-2016:2387-1 |
| SLES 11 SP4 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES 11 SP3 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES 11 SP2 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 | openssl1 | 1.0.1g-0.52.1 | SUSE-SU-2016:2469-1 |
| SUSE Studio Onsite 1.3 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES for SAP 12 SP1 | compat-openssl098 | 0.9.8j-102.1 | SUSE-SU-2016:2468-1 |
| SLES for SAP 12 SP1 | openssl | 1.0.1i-52.1 | SUSE-SU-2016:2394-1 |
| SLES for SAP 12 | openssl | 1.0.1i-27.21.1 | SUSE-SU-2016:2387-1 |
| SLES for SAP 11 SP4 | compat-openssl097g | 0.9.7g-146.22.47.1 | SUSE-SU-2016:2545-1 |
| SLES for SAP 11 SP4 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SLES for SAP 11 SP3 | compat-openssl097g | 0.9.7g-146.22.47.1 | SUSE-SU-2016:2545-1 |
| SUSE OpenStack Cloud 5 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SUSE Manager Proxy 2.1 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SUSE Manager 2.1 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | openssl | 0.9.8j-0.102.2 | SUSE-SU-2016:2458-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.8 | openssl | 1.0.2h-r3 | — |
| Alpine v3.7 | openssl | 1.0.2h-r3 | — |
| Alpine v3.6 | openssl | 1.0.2h-r3 | — |
| Alpine v3.5 | openssl | 1.0.2h-r3 | — |
| Alpine v3.4 | openssl | 1.0.2h-r3 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.3 | openssl | 1.0.2h-r3 | — |
| Alpine v3.2 | openssl | 1.0.2h-r3 | — |
Advisories 16
- USN-3087-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Jun 1, 2026
- DSA-3673-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-637-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2016:2545-1 Security update for compat-openssl097g SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2458-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2469-1 Security update for openssl1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2468-1 Security update for compat-openssl098 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2394-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2387-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2024-0209 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2025
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2024-1277 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- WID-SEC-2024-0210 OpenSSL: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Jan 25, 2024
- SSA-412672 SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 Siemens ProductCERT · Dec 13, 2022
- ICSA-22-349-21 Siemens SCALANCE X-200RNA Switch Devices CISA ICS & IT advisories · Dec 13, 2022
References
- https://www.tenable.com/security/tns-2016-20
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
- http://www-01.ibm.com/support/docview.wss?uid=swg21995039
- 1036885 vdb-entry
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/
- https://www.tenable.com/security/tns-2016-16
- https://www.tenable.com/security/tns-2016-21
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- 92984 vdb-entry
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1370146
- https://bto.bluecoat.com/security-advisory/sa132
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- FreeBSD-SA-16:26 vendor-advisory
- https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=55d83bf7c10c7b205fffa23fa7c3977491e56c07
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf