CVE-2016-2177

57

FAUCET Score

CVE-2016-2177 describes a critical heap-buffer overflow vulnerability in OpenSSL versions through 1.0.2h, affecting products like HP and Oracle. This flaw, stemming from incorrect pointer arithmetic in boundary checks, could allow remote attackers to trigger a denial of service or potentially achieve further impact. With a CVSS score of 9.8 (Critical), it presents a high-impact, low-complexity attack vector. While not listed in CISA's KEV catalog and lacking public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		3.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_mcrp:3.0:::::::*
		10.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_sso:10.0::::certd:::
		10.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_sso:10.0::::dfw:::
		10.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_sso_agent_option:10.0:::::::*
		1.0.1CPE matchmatch criteria	cpe:2.3:a:openssl:openssl:1.0.1:::::::*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

5.9

CvssVersion

3.0

Exploit Intelligence

EPSS Score

44.51%

Probability of exploitation in next 30 days

EPSS Percentile

98.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.4451 is in the 96th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (33)

gentoopatch availablevia nvd_reference

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.23-102.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_auth_kerb-0:5.4-35.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-14.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.5-13.Final_redhat_1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_jk-0:1.2.41-14.redhat_1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_rt-0:2.4.1-16.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_security-0:2.9.1-18.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-nghttp2-0:1.12.0-9.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2h-12.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl-0:1.0.1e-48.el6_8.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.1e-51.el7_2.7

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.4Fixed in: openssl

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el6

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7

redhatpatch availablevia redhat_api

Product: Text-Only JBCS

redhatpatch availablevia nvd_reference

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Enterprise Web Server 3Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: openssl097a

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl098e

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl098e

Vendor Advisories (1)

redhatCVE-2016-2177Low

openssl: Possible integer overflow vulnerabilities in codebase

References

kb.juniper.net / InfoCenter/index

Third Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-09/msg00022.html

lists.opensuse.org / opensuse-security-announce/2016-09/msg00023.html

lists.opensuse.org / opensuse-security-announce/2016-09/msg00024.html

lists.opensuse.org / opensuse-security-announce/2016-09/msg00031.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00005.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00011.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00012.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00029.html

lists.opensuse.org / opensuse-security-announce/2017-10/msg00010.html

lists.opensuse.org / opensuse-security-announce/2017-10/msg00011.html

lists.opensuse.org / opensuse-security-announce/2018-02/msg00032.html

rhn.redhat.com / errata/RHSA-2016-1940.html

rhn.redhat.com / errata/RHSA-2016-2957.html

rhn.redhat.com / errata/RHSA-2017-1659.html

access.redhat.com / errata/RHSA-2017:0193

access.redhat.com / errata/RHSA-2017:0194

access.redhat.com / errata/RHSA-2017:1658

bto.bluecoat.com / security-advisory/sa132

Third Party Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingPatch

cert-portal.siemens.com / productcert/pdf/ssa-412672.pdf

seclists.org / fulldisclosure/2017/Jul/31

git.openssl.org

h20566.www2.hpe.com / hpsc/doc/public/display

h20566.www2.hpe.com / hpsc/doc/public/display

h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay

Third Party Advisory

ics-cert.us-cert.gov / advisories/ICSA-18-144-01

kb.pulsesecure.net / articles/Pulse_Security_Advisories/SA40312

Third Party Advisory

kc.mcafee.com / corporate/index

Third Party Advisory

kc.mcafee.com / corporate/index

security.freebsd.org / advisories/FreeBSD-SA-16:26.openssl.asc

security.gentoo.org / glsa/201612-16

PatchThird Party AdvisoryVDB Entry

support.f5.com / csp/article/K23873366

support.hpe.com / hpsc/doc/public/display

support.hpe.com / hpsc/doc/public/display

arista.com / en/support/advisories-notices/security-advisories/1749-security-advisory-24

citect.schneider-electric.com / safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager

schneider-electric.com / en/download/document/SEVD-2018-137-01

schneider-electric.com / en/download/document/SEVD-2018-144-01

tenable.com / security/tns-2016-16

Third Party Advisory

tenable.com / security/tns-2016-20

tenable.com / security/tns-2016-21

tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl

www-01.ibm.com / support/docview.wss

Third Party Advisory

debian.org / security/2016/dsa-3673

huawei.com / en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

openwall.com / lists/oss-security/2016/06/08/9

oracle.com / technetwork/security-advisory/cpuapr2018-3678067.html

oracle.com / technetwork/security-advisory/cpujan2018-3236628.html

oracle.com / technetwork/security-advisory/cpujul2017-3236622.html

oracle.com / technetwork/security-advisory/cpuoct2016-2881722.html

Third Party Advisory

oracle.com / technetwork/security-advisory/cpuoct2017-3236626.html

oracle.com / technetwork/topics/security/bulletinapr2016-2952098.html

Third Party Advisory

oracle.com / technetwork/topics/security/linuxbulletinoct2016-3090545.html

Third Party Advisory

oracle.com / technetwork/topics/security/ovmbulletinoct2016-3090547.html

Third Party Advisory

securityfocus.com / archive/1/540957/100/0/threaded

securityfocus.com / archive/1/archive/1/540957/100/0/threaded

securityfocus.com / bid/91319

Third Party AdvisoryVDB Entry

securitytracker.com / id/1036088

Third Party AdvisoryVDB Entry

splunk.com / view/SP-CAAAPSV

Third Party Advisory

splunk.com / view/SP-CAAAPUE

Third Party Advisory

ubuntu.com / usn/USN-3087-1

ubuntu.com / usn/USN-3087-2

ubuntu.com / usn/USN-3181-1