CVE-2016-2842
CriticalThe doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly…
Published Feb 24, 2021 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2016-2842, UBUNTU-CVE-2016-2842
Key Facts
Patch immediately- CVE-2016-2842 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Openssl, rootio-openssl, openssl-devel (amazon) and 8 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 54% probability of exploitation in the next 30 days.
- Fixed versions are available, including Openssl 0:1.0.1e-42.el6_7.5, Openssl 1:1.0.1e-51.el7_2.5, Openssl 1:1.0.1k-14.89.amzn1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
54%
Higher than 98.9% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2016-2842 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.
Affected Products
68 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| OpensslOpenssl | 1.0.1, 1.0.1a, 1.0.1b, 1.0.1-beta1, 1.0.1-beta2, 1.0.1-beta3, 1.0.1c, 1.0.1d | 1.0.2g-1 |
| rootio-opensslrootio | See advisory | 1.0.2g-1 |
| openssl-develamazon | See advisory | 1:1.0.1k-14.89.amzn1 |
| openssl-perlamazon | See advisory | 1:1.0.1k-14.89.amzn1 |
| openssl-staticamazon | See advisory | 1:1.0.1k-14.89.amzn1 |
Patched Releases
Openssl
0:1.0.1e-42.el6_7.5, 1:1.0.1e-51.el7_2.5, 1:1.0.1k-14.89.amzn1, 1.0.1e-2+deb7u20, 1.0.1e-48.el6_8.1, 1.0.1e-59.el6_10+sp999, 1.0.1f-1ubuntu2.18, 1.0.1k-3+deb8u4, 1.0.2g-1, 1.0.2g-1ubuntu2, 2:1.0.1e-48.ksplice1.el6_8.1, 2:1.0.1e-51.ksplice1.el7_2.5
openssl-devel
1:1.0.1e-51.el7_2.5, 1:1.0.1k-14.89.amzn1, 1.0.1e-48.el6_8.1, 2:1.0.1e-48.ksplice1.el6_8.1, 2:1.0.1e-51.ksplice1.el7_2.5
openssl-fips
1.0.1t-2.0.1.el6
openssl-fips-devel
1.0.1t-2.0.1.el6
openssl-fips-perl
1.0.1t-2.0.1.el6
openssl-fips-static
1.0.1t-2.0.1.el6
openssl-libs
1:1.0.1e-51.el7_2.5, 2:1.0.1e-51.ksplice1.el7_2.5
openssl-perl
1:1.0.1e-51.el7_2.5, 1:1.0.1k-14.89.amzn1, 1.0.1e-48.el6_8.1, 2:1.0.1e-48.ksplice1.el6_8.1, 2:1.0.1e-51.ksplice1.el7_2.5
openssl-static
1:1.0.1e-51.el7_2.5, 1:1.0.1k-14.89.amzn1, 1.0.1e-48.el6_8.1, 2:1.0.1e-48.ksplice1.el6_8.1, 2:1.0.1e-51.ksplice1.el7_2.5
rootio-openssl
1.0.2g-1
seal-openssl
1.0.1e-59.el6_10+sp999
Timeline
Publicly disclosed
Feb 24, 2021
Last updated
Aug 4, 2026
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-787 Out-of-bounds Write
References
- advisoryhttp://openssl.org/news/secadv/20160301.txt
- advisoryRHSA-2016:0722
- advisoryRHSA-2016:0996
- advisoryRHSA-2016:2073
- advisoryRHSA-2016:2957
FAQ
Common Questions.
The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long…
Affected: Openssl versions 1.0.1, 1.0.1a, 1.0.1b, 1.0.1-beta1, 1.0.1-beta2, 1.0.1-beta3, 1.0.1c, 1.0.1d; rootio-openssl; openssl-devel (amazon), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Openssl 0:1.0.1e-42.el6_7.5, Openssl 1:1.0.1e-51.el7_2.5, Openssl 1:1.0.1k-14.89.amzn1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2016-2842 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo