CVE-2016-2842

CVE-2016-2842 is a critical denial-of-service vulnerability affecting OpenSSL versions 1.0.1 prior to 1.0.1s and 1.0.2 prior to 1.0.2g. The flaw in the doapr_outch function allows remote attackers to trigger an out-of-bounds write or memory exhaustion, potentially leading to system instability or other unspecified impacts, by providing a long string, such as large ASN.1 data. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, potentially leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.