CVE-2016-0705

Name: CVE-2016-0705
Creator: NVD / NIST
Published: 2016-03-03T20:59:00.953+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 26.33%

Last modified Jun 17, 2026

CVE-2016-0705 is a vulnerability of currently unknown severity. Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.. EPSS estimates a 26.33% chance of exploitation in the next 30 days.

Description

Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.

Metrics

EPSS Probability

26.33%

97.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Oracle	Mysql	>= 5.6.0, <= 5.6.29
Oracle	Mysql	>= 5.7.0, <= 5.7.11
Openssl	Openssl	1.0.1
Openssl	Openssl	1.0.1a
Openssl	Openssl	1.0.1b
Openssl	Openssl	1.0.1c
Openssl	Openssl	1.0.1d
Openssl	Openssl	1.0.1e
Openssl	Openssl	1.0.1f
Openssl	Openssl	1.0.1g
Openssl	Openssl	1.0.1h
Openssl	Openssl	1.0.1i
Openssl	Openssl	1.0.1j
Openssl	Openssl	1.0.1k
Openssl	Openssl	1.0.1l
Openssl	Openssl	1.0.1m
Openssl	Openssl	1.0.1n
Openssl	Openssl	1.0.1o
Openssl	Openssl	1.0.1p
Openssl	Openssl	1.0.1q
Openssl	Openssl	1.0.1r
Openssl	Openssl	1.0.2
Openssl	Openssl	1.0.2a
Openssl	Openssl	1.0.2b
Openssl	Openssl	1.0.2c
Openssl	Openssl	1.0.2d
Openssl	Openssl	1.0.2e
Openssl	Openssl	1.0.2f
Google	Android	4.0
Google	Android	4.0.1
Google	Android	4.0.2
Google	Android	4.0.3
Google	Android	4.0.4
Google	Android	4.1
Google	Android	4.1.2
Google	Android	4.2
Google	Android	4.2.1
Google	Android	4.2.2
Google	Android	4.3
Google	Android	4.3.1
Google	Android	4.4
Google	Android	4.4.1
Google	Android	4.4.2
Google	Android	4.4.3
Google	Android	5.0
Google	Android	5.0.1
Google	Android	5.1
Google	Android	5.1.0
Google	Android	6.0
Google	Android	6.0.1

Showing 50 of 55 affected configurations. See NVD for the full list.

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=145889460330120&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=145983526810210&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=146108058503441&w=2Mailing List, Third Party Advisory
http://openssl.org/news/secadv/20160301.txtVendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.htmlThird Party Advisory
http://source.android.com/security/bulletin/2016-05-01.htmlThird Party Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-opensslThird Party Advisory
http://www.debian.org/security/2016/dsa-3500Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatch, Vendor Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatch, Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlVendor Advisory
http://www.securityfocus.com/bid/83754Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/91787Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035133Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2914-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2568Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2575Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2713Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_usThird Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.ascVendor Advisory
https://security.gentoo.org/glsa/201603-15Third Party Advisory
https://www.openssl.org/news/secadv/20160301.txtVendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00053.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=145889460330120&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=145983526810210&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=146108058503441&w=2Mailing List, Third Party Advisory
http://openssl.org/news/secadv/20160301.txtVendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-2957.htmlThird Party Advisory
http://source.android.com/security/bulletin/2016-05-01.htmlThird Party Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-opensslThird Party Advisory
http://www.debian.org/security/2016/dsa-3500Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlPatch, Vendor Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlPatch, Vendor Advisory
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlVendor Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlVendor Advisory
http://www.securityfocus.com/bid/83754Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/91787Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1035133Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2914-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2568Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2575Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2713Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=6c88c71b4e4825c7bc0489306d062d017634eb88
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_usThird Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.ascVendor Advisory
https://security.gentoo.org/glsa/201603-15Third Party Advisory
https://www.openssl.org/news/secadv/20160301.txtVendor Advisory

Timeline

Published: Mar 3, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-0705?

How severe is CVE-2016-0705?

Severity scoring for CVE-2016-0705 is pending analysis. The EPSS model estimates a 26.33% probability of exploitation in the next 30 days.

How do I fix CVE-2016-0705?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-0705?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST