CVE-2016-2106 in Apple Mac OS X

Summary

Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

01/29/2016

Disclosure

05/04/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
89772	Apple Mac OS X OpenSSL numeric error	189	Not defined	Official fix	CVE-2016-2106
83257	OpenSSL evp_enc.c EVP_EncryptUpdate numeric error	189	Not defined	Official fix	CVE-2016-2106

Sources

• MITRE
• NVD
• CVE Details