Denial of Service (DoS) Vulnerability in OpenSSL crypto/bn/bn_print.c

Mar 10, 2023

DoS Vulnerability in OpenSSL crypto/bn/bn_print.c's BN_bn2dec Function (CVE-2016-2182)

Summary

This issue is being investigated by Buffalo Engineering.

Vulnerability ID	Vulnerability Overview
CVE-2016-2182	The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

Affected Supported TeraStations

TS5010/3020/3010
Pending

TS5020/3030
Please upgrade to firmware version v3.0.0 or later