Denial of service in OpenSSL and Oracle VM VirtualBox - CVE-2016-6303

Vulnerability identifier: #VU815

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-6303

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote unauthenticated user to cause DoS conditions on the vulnerable system.
The weakness is caused by integer overflow in the MDC2_Update() function in 'crypto/mdc2/mdc2dgst.c'. By using large ammounts of input data attackers are able to trigger error in input length validation that leads to  crash of the affected service.
Successful exploitation of the vulnerability will result in denial of service on the vulnerable system.

OpenSSL
Oracle VM VirtualBox
Arch Linux
Slackware Linux
Opensuse
openssl (Alpine package)
Data ONTAP operating in 7-Mode
lib32-openssl
openssl
openssl-solibs
SnapDrive for Windows
Network Advisor
Puppet Agent
FOS Firmware
NetWorker
Puppet Enterprise

Update 1.0.2 to version 1.0.2i.
Update 1.0.1 to version 1.0.1u.

openssl (Alpine package) - update to 1.0.1t-r2
SnapDrive for Windows - update to 7.1.4
Data ONTAP operating in 7-Mode - update to 8.2.5
lib32-openssl - update to 1
openssl - addressed in versions 1.0.1u, 1.0.2i
openssl-solibs - addressed in versions 1.0.1u, 1.0.2i
openssl - update to 1.0.2.i-1
Puppet Agent - update to 1.7.1
FOS Firmware - addressed in versions 7.4.2a, 8.01c
Network Advisor - update to 14.0.2
NetWorker - update to 19.10.0.0
Puppet Enterprise - update to 2016.4.0

• https://www.openssl.org/news/secadv/20160922.txt

• openSUSE update for openssl-steam
• Denial of service in openssl (Alpine package)
• Multiple vulnerabilities in IBM FOS Firmware
• Multiple vulnerabilities in Multiple N series Products
• Multiple vulnerabilities in Dell Networker
• Slackware Linux update for openssl
• Arch Linux update for lib32-openssl
• Arch Linux update for openssl
• Puppet Enterprise and Puppet Agent update for OpenSSL