Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before…
Priority HIGH 66CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
Why it matters now
EPSS 0.31985 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 31
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:* | before 0.12.16; 4.0.0 to before 4.6.0; 6.0.0 to before 6.6.0 | Vulnerable | NodeJS |
| cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:* | 1.0.1 | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:* | 1.0.1a | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:* | 1.0.1b | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:* | 1.0.1c | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:* | 1.0.1d | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:* | 1.0.1e | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:* | 1.0.1f | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:* | 1.0.1g | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:* | 1.0.1h | Vulnerable | OpenSSL |
- cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:* Versions before 0.12.16; 4.0.0 to before 4.6.0; 6.0.0 to before 6.6.0 Vulnerable ·NodeJS
- cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:* Versions 1.0.1a Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:* Versions 1.0.1b Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:* Versions 1.0.1c Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:* Versions 1.0.1d Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:* Versions 1.0.1e Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:* Versions 1.0.1f Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:* Versions 1.0.1g Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:* Versions 1.0.1h Vulnerable ·OpenSSL
Show 21 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:* | 1.0.1i | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:* | 1.0.1j | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:* | 1.0.1k | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:* | 1.0.1l | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:* | 1.0.1m | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:* | 1.0.1n | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:* | 1.0.1o | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:* | 1.0.1p | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:* | 1.0.1q | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:* | 1.0.1r | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:* | 1.0.1s | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:* | 1.0.1t | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:* | 1.0.2 | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:* | 1.0.2a | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:* | 1.0.2b | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:* | 1.0.2c | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:* | 1.0.2d | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:* | 1.0.2e | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:* | 1.0.2f | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:* | 1.0.2g | Vulnerable | OpenSSL |
| cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:* | 1.0.2h | Vulnerable | OpenSSL |
- cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:* Versions 1.0.1i Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:* Versions 1.0.1j Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:* Versions 1.0.1k Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:* Versions 1.0.1l Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1m:*:*:*:*:*:*:* Versions 1.0.1m Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1n:*:*:*:*:*:*:* Versions 1.0.1n Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1o:*:*:*:*:*:*:* Versions 1.0.1o Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1p:*:*:*:*:*:*:* Versions 1.0.1p Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:* Versions 1.0.1q Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1r:*:*:*:*:*:*:* Versions 1.0.1r Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:* Versions 1.0.1s Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.1t:*:*:*:*:*:*:* Versions 1.0.1t Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:* Versions 1.0.2a Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:* Versions 1.0.2b Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:* Versions 1.0.2c Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:* Versions 1.0.2d Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:* Versions 1.0.2e Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:* Versions 1.0.2f Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:* Versions 1.0.2g Vulnerable ·OpenSSL
- cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:* Versions 1.0.2h Vulnerable ·OpenSSL
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
Not affected: 7 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat JBoss Enterprise Application Platform 6
- Red Hat JBoss Enterprise Web Server 1
- Red Hat JBoss Enterprise Web Server 2
- Red Hat JBoss Enterprise Web Server 3
Timeline
- 2026-10-02 Threatist record created from CVE-2016-6303
- 2026-10-03 Alias added: GHSA-w6xc-jcff-g3vg
References
Patch 6
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1370146
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
Advisory 9
- https://www.tenable.com/security/tns-2016-20
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
- http://www-01.ibm.com/support/docview.wss?uid=swg21995039
- https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/
- https://www.tenable.com/security/tns-2016-16
- https://www.tenable.com/security/tns-2016-21
- https://bto.bluecoat.com/security-advisory/sa132
- FreeBSD-SA-16:26
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
Sources
- CVE-2016-6303 · CVE Program
- CVE-2016-6303 · NVD
- FIRST EPSS
- GHSA-w6xc-jcff-g3vg · GitHub Advisory Database · CC BY 4.0
- CVE-2016-6303 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences