Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-6306

Опубликовано: 26 сент. 2016
Источник: ubuntu
Приоритет: medium
CVSS2: 4.3
CVSS3: 5.9

Описание

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

РелизСтатусПримечание
artful

released

1.0.2g-1ubuntu9
bionic

released

1.0.2g-1ubuntu9
cosmic

released

1.0.2g-1ubuntu9
devel

released

1.0.2g-1ubuntu9
disco

released

1.0.2g-1ubuntu9
esm-infra-legacy/trusty

not-affected

1.0.1f-1ubuntu2.20
esm-infra/bionic

not-affected

1.0.2g-1ubuntu9
esm-infra/xenial

not-affected

1.0.2g-1ubuntu4.4
precise

released

1.0.1-4ubuntu5.37
precise/esm

not-affected

1.0.1-4ubuntu5.37

Показывать по

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
precise

ignored

end of life
precise/esm

DNE

precise was needed
trusty

ignored

end of standard support
trusty/esm

DNE

trusty was needed

Показывать по

4.3 Medium

CVSS2

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
redhat
больше 8 лет назад

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

CVSS3: 5.9
nvd
больше 8 лет назад

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

CVSS3: 5.9
debian
больше 8 лет назад

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2 ...

CVSS3: 5.9
github
около 3 лет назад

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

CVSS3: 5.9
fstec
больше 8 лет назад

Уязвимость библиотеки OpenSSL, связанная с чтением за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

4.3 Medium

CVSS2

5.9 Medium

CVSS3