CVE-2016-2178: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only
• Debian Debian Linux: version 8.0 only
• Node.js Node.js: from 0.10.0, before 0.10.47 (fixed in 0.10.47); from 0.12.0, before 0.12.16 (fixed in 0.12.16); from 4.0.0, up to and including 4.1.2; from 4.2.0, before 4.6.0 (fixed in 4.6.0); from 5.0.0, before 6.7.0 (fixed in 6.7.0)
• OpenSSL OpenSSL: version 1.0.1 only; version 1.0.1a only; version 1.0.1b only; version 1.0.1c only; version 1.0.1d only; version 1.0.1e only; …
• Oracle Linux: version 5 only; version 6 only; version 7 only
• Oracle Solaris: version 10 only; version 11.3 only
• Suse Linux Enterprise: version 12.0 only

Published 2016-06-20. Last modified 2026-06-17.