CVE-2016-6309

10

HIGHCVSS v2

Published

September 26, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.

openssl/openssl

GitHubGeneral purpose TLS and crypto library

= 1.1.0aNVD

ruby/openssl

GitHubProvides SSL, TLS and general purpose cryptography.

= 1.1.0aNVD

openssl

NPM

More on this CVE

NVD↗GitHub Advisory↗

Nodejs openssl wrapper

= 1.1.0aNVD

openssl

Crates.ioOpenSSL bindings

= 1.1.0aNVD

openssl

RubyGemsOpenSSL for Ruby provides access to SSL/TLS and general-purpose cryptography based on the OpenSSL library.

= 1.1.0aNVD

Security Advisories

CVE-2016-6309

Description

More on this CVE