CVE-2016-0705 in the critical feed json
Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g…
published 2016-03-03 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-0740
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 26.3%
- EPSS 26.3% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
Patch / fix
- openssl Debian 14, Debian 13, Debian 12 1.0.2g-1
debian advisories DEBIAN-CVE-2016-0705
- openssl Ubuntu 14.04 LTS 1.0.1f-1ubuntu2.18
- openssl Ubuntu 16.04 LTS 1.0.2g-1ubuntu2
ubuntu advisories UBUNTU-CVE-2016-0705
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- java-1.8.0-ibm RHEL 6 EXTRAS, network satellite 5.8 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-src RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-demo RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-jdbc RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-plugin RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm RHEL 7 EXTRAS 1:1.8.0.5.20-1jpp.1.el7
- java-1.8.0-ibm-src RHEL 7 EXTRAS 1:1.8.0.5.20-1jpp.1.el7
- java-1.8.0-ibm-demo RHEL 7 EXTRAS 1:1.8.0.5.20-1jpp.1.el7
red hat advisories RHSA-2018:2713RHSA-2018:2575RHSA-2018:2568RHSA-2016:0379RHSA-2016:0301
- java-1_8_0-ibm SLES 12 SP3, SLES 12 SP2-BCL, SLE Software Development Kit 12 SP3 +7 more 1.8.0_sr5.20-30.36.1
- java-1_8_0-ibm SLE Module for Legacy 15 1.8.0_sr5.20-3.6.2
- openssl OpenStack Cloud 5, Manager Proxy 2.1, Manager 2.1 0.9.8j-0.91.1
- openssl Studio Onsite 1.3, SLES for SAP 11 SP4, SLES 11 SP4 +5 more 0.9.8j-0.89.1
- openssl SLES for SAP 12 SP1, SLES 12 SP1, SLED 12 SP1 +1 more 1.0.1i-44.1
- openssl SLES for SAP 12, SLES 12, SLED 12 +1 more 1.0.1i-27.13.1
- openssl1 SLES 11-SECURITY 1.0.1g-0.40.1
suse advisories SUSE-SU-2018:2839-2SUSE-SU-2018:3082-1SUSE-SU-2018:2839-1SUSE-SU-2016:1057-1SUSE-SU-2016:0624-1SUSE-SU-2016:0620-1
- openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2
opensuse advisories openSUSE-SU-2024:11127-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2016-0705 updated cvss 2.6
OpenSSL: Double-free in DSA code
-
Red Hat Enterprise Linux 6 guest-images Red Hat Enterprise Linux 7 rhel-guest-image Red Hat JBoss Enterprise Web Server 3 opensslaffected: no fix available
-
Red Hat Enterprise Linux Client (v. 7) openssl 1.0.1e-51.el7_2.4, openssl-libs 1.0.1e-51.el7_2.4 Red Hat Enterprise Linux Client Optional (v. 7) openssl-perl 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el7fixed: vendor fix RHSA-2018:2568
-
Red Hat Enterprise Linux ComputeNode (v. 7) openssl 1.0.1e-51.el7_2.4, openssl-libs 1.0.1e-51.el7_2.4 Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-perl 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7fixed: vendor fix RHSA-2018:2568
-
Red Hat Enterprise Linux Desktop (v. 6) openssl 1.0.1e-42.el6_7.4 Red Hat Enterprise Linux Desktop Optional (v. 6) openssl-perl 1.0.1e-42.el6_7.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2575
-
Red Hat Enterprise Linux HPC Node (v. 6) openssl 1.0.1e-42.el6_7.4 Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl-perl 1.0.1e-42.el6_7.4fixed: vendor fix RHSA-2016:0301
show 11 moreshow fewer
-
Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2575
-
Red Hat Enterprise Linux Server (v. 6) openssl 1.0.1e-42.el6_7.4 Red Hat Enterprise Linux Server (v. 7) openssl 1.0.1e-51.el7_2.4, openssl-libs 1.0.1e-51.el7_2.4 Red Hat Enterprise Linux Server Optional (v. 6) openssl-perl 1.0.1e-42.el6_7.4 Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2575
-
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el7fixed: vendor fix RHSA-2018:2568
-
Red Hat Enterprise Linux Workstation (v. 6) openssl 1.0.1e-42.el6_7.4 Red Hat Enterprise Linux Workstation (v. 7) openssl 1.0.1e-51.el7_2.4, openssl-libs 1.0.1e-51.el7_2.4 Red Hat Enterprise Linux Workstation Optional (v. 6) openssl-perl 1.0.1e-42.el6_7.4 Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl 1.0.1e-51.el7_2.4fixed: vendor fix RHSA-2016:0301
-
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2575
-
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el7fixed: vendor fix RHSA-2018:2568
-
Red Hat JBoss Core Servicesfixed: vendor fix RHSA-2016:2957
-
Red Hat Satellite 5.8 (RHEL v.6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2713
-
Red Hat RHEL 7-based RHEV-H rhev-hypervisor7 7.2-20160302.1.el7ev Red Hat RHEV Hypervisor for RHEL-6 rhev-hypervisor7 7.2-20160302.1.el6evfixed: vendor fix RHSA-2016:0379
-
Red Hat Enterprise Linux 5 openssl, openssl097a Red Hat Enterprise Linux 6 openssl098e Red Hat Enterprise Linux 7 openssl098e Red Hat JBoss Enterprise Application Platform 6 openssl Red Hat JBoss Enterprise Web Server 2 opensslnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-22-349-21 updated cvss 9.8
Siemens SCALANCE X-200RNA Switch Devices
-
Siemens SCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2) <V3.2.7 Siemens SCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2) <V3.2.7 Siemens SCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3) <V3.2.7 Siemens SCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3) <V3.2.7 Siemens SCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3) <V3.2.7affected: fixed in V3.2.7, mitigation support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
Exploit prediction
26.33% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Technology feeds
References
-
oracle.com
/technetwork/security-advisory/cpujul2016-2881720.html
patch, vendor-advisory
-
oracle.com
/technetwork/security-advisory/cpuapr2016v3-2985753.html
patch, vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2016-March/178358.html
vendor-advisory, mailing-list, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2713
vendor-advisory, third-party-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2016-March/178817.html
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=146108058503441&w=2
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-05/msg00053.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00010.html
vendor-advisory, mailing-list, third-party-advisory
-
security.freebsd.org
/advisories/FreeBSD-SA-16:12.openssl.asc
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00003.html
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=145889460330120&w=2
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=145983526810210&w=2
vendor-advisory, mailing-list, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2575
vendor-advisory, third-party-advisory
-
ubuntu.com
/usn/USN-2914-1
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00038.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-06/msg00019.html
vendor-advisory, mailing-list, third-party-advisory
-
tools.cisco.com
/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2568
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00004.html
vendor-advisory, mailing-list, third-party-advisory
-
debian.org
/security/2016/dsa-3500
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00007.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00001.html
vendor-advisory, mailing-list, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2016-2957.html
vendor-advisory, third-party-advisory
-
security.gentoo.org
/glsa/201603-15
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00006.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00002.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00009.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-03/msg00005.html
vendor-advisory, mailing-list, third-party-advisory
-
oracle.com
/technetwork/topics/security/linuxbulletinjan2016-2867209.html
vendor-advisory
-
oracle.com
/technetwork/topics/security/bulletinapr2016-2952098.html
vendor-advisory
-
openssl.org
/news/secadv/20160301.txt
vendor-advisory
-
openssl.org
/news/secadv/20160301.txt
vendor-advisory
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085
-
source.android.com
/security/bulletin/2016-05-01.html
third-party-advisory
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946
- git.openssl.org /?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736
- kb.pulsesecure.net /articles/Pulse_Security_Advisories/SA40168
-
kb.juniper.net
/InfoCenter/index?page=content&id=JSA10759
third-party-advisory
-
securityfocus.com
/bid/83754
third-party-advisory, vdb-entry
-
securityfocus.com
/bid/91787
third-party-advisory, vdb-entry
-
securitytracker.com
/id/1035133
third-party-advisory, vdb-entry
- cert-portal.siemens.com /productcert/pdf/ssa-412672.pdf
-
h20566.www2.hpe.com
/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us
third-party-advisory
-
h20566.www2.hpe.com
/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990
third-party-advisory
Sources
- CVE List CVE-2016-0705
- NVD CVE-2016-0705
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.