CVE-2016-6305

5

MEDIUMCVSS v2

Published

September 26, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.

openssl/openssl

GitHubGeneral purpose TLS and crypto library

= 1.1.0NVD

ruby/openssl

GitHubProvides SSL, TLS and general purpose cryptography.

= 1.1.0NVD

openssl

NPM

More on this CVE

NVD↗GitHub Advisory↗

Nodejs openssl wrapper

= 1.1.0NVD

openssl

Crates.ioOpenSSL bindings

= 1.1.0NVD

openssl

RubyGemsOpenSSL for Ruby provides access to SSL/TLS and general-purpose cryptography based on the OpenSSL library.

= 1.1.0NVD

Security Advisories

CVE-2016-6305

Description

More on this CVE