CVE-2016-2108 in Mac OS X

Resumen (Inglés)

The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2016-01-29

Divulgación

2016-05-04

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
89774	Apple Mac OS X OpenSSL desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2016-2108
89750	Apple Mac OS X LibreSSL desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2016-2108
83254	OpenSSL ASN.1 Encoder a_int.c desbordamiento de búfer	119	No está definido	Arreglo oficial	CVE-2016-2108

Fuentes

• MITRE
• NVD
• CVE Details