Описание
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
| Релиз | Статус | Примечание | 
|---|---|---|
| artful | released  | 1.0.2g-1ubuntu9 | 
| bionic | released  | 1.0.2g-1ubuntu9 | 
| cosmic | released  | 1.0.2g-1ubuntu9 | 
| devel | released  | 1.0.2g-1ubuntu9 | 
| disco | released  | 1.0.2g-1ubuntu9 | 
| esm-infra-legacy/trusty | released  | 1.0.1f-1ubuntu2.20 | 
| esm-infra/bionic | released  | 1.0.2g-1ubuntu9 | 
| esm-infra/xenial | released  | 1.0.2g-1ubuntu4.4 | 
| precise | released  | 1.0.1-4ubuntu5.37 | 
| precise/esm | not-affected  | 1.0.1-4ubuntu5.37 | 
Показывать по
| Релиз | Статус | Примечание | 
|---|---|---|
| artful | DNE  | |
| bionic | DNE  | |
| cosmic | DNE  | |
| devel | DNE  | |
| disco | DNE  | |
| esm-infra-legacy/trusty | DNE  | trusty/esm was DNE [trusty was needs-triage] | 
| precise | ignored  | end of life | 
| precise/esm | DNE  | precise was needs-triage | 
| trusty | ignored  | end of standard support | 
| trusty/esm | DNE  | trusty was needs-triage | 
Показывать по
7.8 High
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 befo ...
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
Уязвимость в файле t1_lib.c библиотеки OpenSSL, позволяющие нарушителю вызвать отказ в обслуживании
7.8 High
CVSS2
7.5 High
CVSS3