CVE-2016-2182

55

FAUCET Score

CVE-2016-2182 is a critical vulnerability in the BN_bn2dec function of OpenSSL versions prior to 1.1.0, affecting products from vendors like HP and Oracle. This flaw, rated 9.8 CRITICAL on CVSS, allows remote attackers to trigger a denial of service through an out-of-bounds write, potentially leading to application crashes or other unspecified impacts, with no user interaction required. Despite its high severity and significant community discussion, there is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, indicating no active exploitation.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		3.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_federation_agent:3.0:::::::*
		3.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_mcrp:3.0:::::::*
		10.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_sso:10.0::::certd:::
		10.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_sso:10.0::::dfw:::
		10.0CPE matchmatch criteria	cpe:2.3:a:hp:icewall_sso_agent_option:10.0:::::::*

CVSS Data

CVSS version used by this source: 3.0

9.8CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

5.9

CvssVersion

3.0

Exploit Intelligence

EPSS Score

44.22%

Probability of exploitation in next 30 days

EPSS Percentile

98.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.4422 is in the 96th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (37)

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 6Fixed in: jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl-0:1.0.1e-48.el6_8.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.1e-51.el7_2.7

redhatpatch availablevia redhat_api

Product: Text-Only JBCS

redhatvendor investigatingvia redhat_api

Product: Red Hat JBoss Enterprise Web Server 3Fixed in: openssl

redhatno patchvia redhat_api

Product: Red Hat JBoss Enterprise Application Platform 6Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: openssl098e

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl098e

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 1Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat JBoss Enterprise Web Server 2Fixed in: openssl

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: openssl097a

Vendor Advisories (1)

redhatCVE-2016-2182Moderate

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

References

kb.juniper.net / InfoCenter/index

Third Party Advisory

lists.opensuse.org / opensuse-security-announce/2016-09/msg00022.html

lists.opensuse.org / opensuse-security-announce/2016-09/msg00023.html

lists.opensuse.org / opensuse-security-announce/2016-09/msg00024.html

lists.opensuse.org / opensuse-security-announce/2016-09/msg00031.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00005.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00011.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00012.html

lists.opensuse.org / opensuse-security-announce/2016-10/msg00029.html

lists.opensuse.org / opensuse-security-announce/2017-10/msg00010.html

lists.opensuse.org / opensuse-security-announce/2017-10/msg00011.html

lists.opensuse.org / opensuse-security-announce/2018-02/msg00032.html

rhn.redhat.com / errata/RHSA-2016-1940.html

access.redhat.com / errata/RHSA-2018:2185

access.redhat.com / errata/RHSA-2018:2186

access.redhat.com / errata/RHSA-2018:2187

bto.bluecoat.com / security-advisory/sa132

Third Party Advisory

cert-portal.siemens.com / productcert/pdf/ssa-412672.pdf

seclists.org / fulldisclosure/2017/Jul/31

git.openssl.org

h20566.www2.hpe.com / hpsc/doc/public/display

h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay

Third Party Advisory

kb.pulsesecure.net / articles/Pulse_Security_Advisories/SA40312

Third Party Advisory

kc.mcafee.com / corporate/index

Third Party Advisory

kc.mcafee.com / corporate/index

security.freebsd.org / advisories/FreeBSD-SA-16:26.openssl.asc

source.android.com / security/bulletin/2017-03-01

source.android.com / security/bulletin/2017-03-01.html

support.f5.com / csp/article/K01276005

support.hpe.com / hpsc/doc/public/display

support.hpe.com / hpsc/doc/public/display

arista.com / en/support/advisories-notices/security-advisories/1749-security-advisory-24

tenable.com / security/tns-2016-16

Third Party Advisory

tenable.com / security/tns-2016-20

tenable.com / security/tns-2016-21

www-01.ibm.com / support/docview.wss

Third Party Advisory

debian.org / security/2016/dsa-3673

huawei.com / en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en

oracle.com / technetwork/security-advisory/cpuapr2018-3678067.html

oracle.com / technetwork/security-advisory/cpujan2018-3236628.html

oracle.com / technetwork/security-advisory/cpujul2017-3236622.html

oracle.com / technetwork/security-advisory/cpuoct2016-2881722.html

Third Party Advisory

oracle.com / technetwork/security-advisory/cpuoct2017-3236626.html

oracle.com / technetwork/topics/security/linuxbulletinoct2016-3090545.html

Third Party Advisory

oracle.com / technetwork/topics/security/ovmbulletinoct2016-3090547.html

Third Party Advisory

securityfocus.com / bid/92557

Third Party AdvisoryVDB Entry

securitytracker.com / id/1036688

securitytracker.com / id/1037968

splunk.com / view/SP-CAAAPSV

Third Party Advisory

splunk.com / view/SP-CAAAPUE

Third Party Advisory

ubuntu.com / usn/USN-3087-1

ubuntu.com / usn/USN-3087-2