CVE-2016-2108
CriticalSummary
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the 'negative zero' issue.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to severe security and service availability issues.
Recommendation
It is recommended to upgrade OpenSSL to version 1.0.1o or 1.0.2c or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue.