CVE Catalog
CVE-2016-6303
CriticalSummary
Integer overflow in the MDC2_Update function in OpenSSL before version 1.1.0 may allow remote attackers to cause a denial of service through out-of-bounds write, leading to application crash.
Risk Assessment
The organization may experience service downtime and potential unspecified side effects, impacting system availability.
Recommendation
It is recommended to upgrade OpenSSL to version 1.1.0 or later to mitigate this vulnerability.
Original NVD description (English source)
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.