Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-6303
9.8
CRITICALCVSS v3
Published
September 16, 2016
CVSS v2
7.5 HIGH
Affected
8 projects
Assigned by
Red Hat
Severity scale
010
Description
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
openssl/openssl
GitHubGeneral purpose TLS and crypto library
GitHubGeneral purpose TLS and crypto library= 1.0.1m, = 1.0.2a, = 1.0.1j, = 1.0.1h, = 1.0.2e, = 1.0.1r, = 1.0.2b, = 1.0.1c, = 1.0.1g, = 1.0.2g, = 1.0.1a, = 1.0.2h, = 1.0.1d, = 1.0.1t, = 1.0.2c, = 1.0.1p, = 1.0.1k, = 1.0.1b, = 1.0.1n, = 1.0.1q, = 1.0.1e, = 1.0.1l, = 1.0.1f, = 1.0.1s, = 1.0.1o, = 1.0.2, = 1.0.2f, = 1.0.1i, = 1.0.1, = 1.0.2dNVD
ruby/opensslGitHubProvides SSL, TLS and general purpose cryptography.
GitHubProvides SSL, TLS and general purpose cryptography.= 1.0.1m, = 1.0.2a, = 1.0.1j, = 1.0.1h, = 1.0.2e, = 1.0.1r, = 1.0.2b, = 1.0.1c, = 1.0.1g, = 1.0.2g, = 1.0.1a, = 1.0.2h, = 1.0.1d, = 1.0.1t, = 1.0.2c, = 1.0.1p, = 1.0.1k, = 1.0.1b, = 1.0.1n, = 1.0.1q, = 1.0.1e, = 1.0.1l, = 1.0.1f, = 1.0.1s, = 1.0.1o, = 1.0.2, = 1.0.2f, = 1.0.1i, = 1.0.1, = 1.0.2dNVD
NPM
NuGet Gallery
Crates.io
RubyGems