| Revision Date: | 2017-03-03 | Version: | 5 |
| Title: | The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service - CVE-2016-2180 |
| Description: | The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command. |
| Family: | windows | Class: | vulnerability |
| Status: | DRAFT | Reference(s): | CVE-2016-2180
|
| Platform(s): | Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Vista
Microsoft Windows XP
| Product(s): | OpenSSL
|
| Definition Synopsis |
| OpenSSL is installed + file version OpenSSL is installed
AND Check for file version
Check if OpenSSL 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2i
OR Check if OpenSSL 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1u
OR OpenSSL (x86) is installed + file version
OpenSSL (32_bit) is installed
AND Check for file version
Check if OpenSSL 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2i (x86)
OR Check if OpenSSL 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1u (x86)
OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2i on ProgramFilesDir
OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2i on ProgramFilesDir (x86)
OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2i on System32 and SysWOW64
OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1u on ProgramFilesDir
OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1u on ProgramFilesDir (x86)
OR Check if ssleay32.dll 1.0.1 version is greater than or equal 1.0.1 and less than 1.0.1u on System32 and SysWOW64
|