CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects OpenSSL. Its EPSS score suggests a 44.5% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2016-2177
Severity
CRITICAL
CVSS
9.8
EPSS
44.51%
OpenSSL
Original NVD Description
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.