| # OpenSSL Advisory: September 22nd 2016 |
| |
| OpenSSL have published a [security advisory](https://www.openssl.org/news/secadv/20160922.txt). Here's how it affects BoringSSL: |
| |
| CVE | Summary | [Severity] in OpenSSL | Impact to BoringSSL |
| ----|---------|-----------------------|--------------------- |
| CVE-2016-6304 | OCSP Status Request extension unbounded memory growth | High | Not affected; buggy code was removed. |
| CVE-2016-6305 | SSL_peek() hang on empty record | Moderate | Not affected; regression introduced after fork. (Added [test](https://boringssl-review.googlesource.com/c/11090/) anyway.) |
| CVE-2016-2183 | SWEET32 Mitigation | Low | Not practical to do anything right now or of much interest (bulk ciphers do not affect downgrade and HIGH/MEDIUM aren't useful APIs for server operators). |
| CVE-2016-6303 | OOB write in MDC2_Update | Low | Not affected; buggy code was removed. |
| CVE-2016-6302 | Malformed SHA512 ticket DoS | Low | Not affected; independently fixed in [April 2015](https://boringssl.googlesource.com/boringssl/+/adcc39560e638d0e9866dac698d64370d1c0abef). |
| CVE-2016-2182 | OOB write in BN_bn2dec | Low | Fix imported [August 2016](https://boringssl.googlesource.com/boringssl/+/958aaf1ea1b481e8ef32970d5b0add80504be4b2) (and then [rewritten](https://boringssl.googlesource.com/boringssl/+/7c040756178e14a4d181b6d93abb3827c93189c4)). |
| CVE-2016-2180 | OOB read in TS_OBJ_print_bio | Low | Not affected; buggy code was removed. |
| CVE-2016-2177 | Pointer arithmetic undefined behavior | Low | Not affected; buggy code was rewritten. |
| CVE-2016-2178 | Constant time flag not preserved in DSA signing | Low | Fix imported [June 2016](https://boringssl.googlesource.com/boringssl/+/26b7c35d8c78065a57c93a01d95b31eb85de51b9). |
| CVE-2016-2179 | DTLS buffered message DoS | Low | Not affected; buggy code was removed. |
| CVE-2016-2181 | DTLS replay protection DoS | Low | Not affected; buggy code was removed. |
| CVE-2016-6306 | Certificate message OOB reads | Low | Not affected; buggy code was rewritten. |
| CVE-2016-6307 | Excessive allocation of memory on TLS messages | Low | Not affected; regression introduced after fork. |
| CVE-2016-6308 | Excessive allocation of memory on DTLS messages | Low | Not affected; regression introduced after fork. |
| |
| [Severity]: https://openssl-library.org/policies/general/security-policy/index.html#issue-severity |
