CVE-2016-6304

7.5

HIGHCVSS v3

Published

September 26, 2016

CVSS v2

7.8 HIGH

Affected

8 projects

Assigned by

Red Hat

Severity scale

010

Description

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

openssl/openssl

GitHubGeneral purpose TLS and crypto library

= 1.0.2a, = 1.0.2e, = 1.0.2b, = 1.0.2h, = 1.0.2c, = 1.0.2, = 1.0.2f, = 1.0.2d, = 1.1.0, = 1.0.1m, = 1.0.1j, = 1.0.1, = 1.0.1h, = 1.0.1r, = 1.0.1c, = 1.0.1g, = 1.0.1a, = 1.0.1d, = 1.0.1t, = 1.0.1p, = 1.0.1k, = 1.0.1b, = 1.0.1n, = 1.0.1q, = 1.0.1e, = 1.0.1l, = 1.0.1f, = 1.0.1s, = 1.0.1o, = 1.0.1iNVD

ruby/openssl

GitHubProvides SSL, TLS and general purpose cryptography.

= 1.0.2a, = 1.0.2e, = 1.0.2b, = 1.0.2h, = 1.0.2c, = 1.0.2, = 1.0.2f, = 1.0.2d, = 1.1.0, = 1.0.1m, = 1.0.1j, = 1.0.1, = 1.0.1h, = 1.0.1r, = 1.0.1c, = 1.0.1g, = 1.0.1a, = 1.0.1d, = 1.0.1t, = 1.0.1p, = 1.0.1k, = 1.0.1b, = 1.0.1n, = 1.0.1q, = 1.0.1e, = 1.0.1l, = 1.0.1f, = 1.0.1s, = 1.0.1o, = 1.0.1iNVD

More on this CVE

NVD↗GitHub Advisory↗

openssl

NPMNodejs openssl wrapper

= 1.0.2a, = 1.0.2e, = 1.0.2b, = 1.0.2h, = 1.0.2c, = 1.0.2, = 1.0.2f, = 1.0.2d, = 1.1.0, = 1.0.1m, = 1.0.1j, = 1.0.1, = 1.0.1h, = 1.0.1r, = 1.0.1c, = 1.0.1g, = 1.0.1a, = 1.0.1d, = 1.0.1t, = 1.0.1p, = 1.0.1k, = 1.0.1b, = 1.0.1n, = 1.0.1q, = 1.0.1e, = 1.0.1l, = 1.0.1f, = 1.0.1s, = 1.0.1o, = 1.0.1iNVD

nodejs

Python Package IndexPython bindings and utils for Node.js and io.js

>= 0.12.0, < 0.12.16, >= 0.10.0, < 0.10.47, >= 6.0.0, < 6.7.0, >= 4.0.0, < 4.6.0NVD

nodejs

NPM

>= 0.12.0, < 0.12.16, >= 0.10.0, < 0.10.47, >= 6.0.0, < 6.7.0, >= 4.0.0, < 4.6.0NVD

Node.js

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 0.12.0, < 0.12.16, >= 0.10.0, < 0.10.47, >= 6.0.0, < 6.7.0, >= 4.0.0, < 4.6.0NVD

openssl

Crates.ioOpenSSL bindings

= 1.0.2a, = 1.0.2e, = 1.0.2b, = 1.0.2h, = 1.0.2c, = 1.0.2, = 1.0.2f, = 1.0.2d, = 1.1.0, = 1.0.1m, = 1.0.1j, = 1.0.1, = 1.0.1h, = 1.0.1r, = 1.0.1c, = 1.0.1g, = 1.0.1a, = 1.0.1d, = 1.0.1t, = 1.0.1p, = 1.0.1k, = 1.0.1b, = 1.0.1n, = 1.0.1q, = 1.0.1e, = 1.0.1l, = 1.0.1f, = 1.0.1s, = 1.0.1o, = 1.0.1iNVD

openssl

RubyGemsOpenSSL for Ruby provides access to SSL/TLS and general-purpose cryptography based on the OpenSSL library.

= 1.0.2a, = 1.0.2e, = 1.0.2b, = 1.0.2h, = 1.0.2c, = 1.0.2, = 1.0.2f, = 1.0.2d, = 1.1.0, = 1.0.1m, = 1.0.1j, = 1.0.1, = 1.0.1h, = 1.0.1r, = 1.0.1c, = 1.0.1g, = 1.0.1a, = 1.0.1d, = 1.0.1t, = 1.0.1p, = 1.0.1k, = 1.0.1b, = 1.0.1n, = 1.0.1q, = 1.0.1e, = 1.0.1l, = 1.0.1f, = 1.0.1s, = 1.0.1o, = 1.0.1iNVD

Security Advisories

CVE-2016-6304

Description

More on this CVE