Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-6304

Опубликовано: 26 сент. 2016
Источник: ubuntu
Приоритет: high
EPSS Средний
CVSS2: 7.8
CVSS3: 7.5

Описание

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

РелизСтатусПримечание
artful

released

1.0.2g-1ubuntu9
bionic

released

1.0.2g-1ubuntu9
cosmic

released

1.0.2g-1ubuntu9
devel

released

1.0.2g-1ubuntu9
disco

released

1.0.2g-1ubuntu9
esm-infra-legacy/trusty

not-affected

1.0.1f-1ubuntu2.20
esm-infra/bionic

not-affected

1.0.2g-1ubuntu9
esm-infra/xenial

not-affected

1.0.2g-1ubuntu4.4
precise

released

1.0.1-4ubuntu5.37
precise/esm

not-affected

1.0.1-4ubuntu5.37

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
precise

ignored

end of life
precise/esm

DNE

precise was needs-triage
trusty

ignored

end of standard support
trusty/esm

DNE

trusty was needs-triage

Показывать по

EPSS

Процентиль: 95%
0.20283
Средний

7.8 High

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
больше 8 лет назад

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

CVSS3: 7.5
nvd
больше 8 лет назад

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

CVSS3: 7.5
debian
больше 8 лет назад

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 befo ...

CVSS3: 7.5
github
около 3 лет назад

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

CVSS3: 7.5
fstec
почти 9 лет назад

Уязвимость в файле t1_lib.c библиотеки OpenSSL, позволяющие нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 95%
0.20283
Средний

7.8 High

CVSS2

7.5 High

CVSS3

Уязвимость CVE-2016-6304