Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-6308

Опубликовано: 26 сент. 2016
Источник: ubuntu
Приоритет: low
EPSS Средний
CVSS2: 7.1
CVSS3: 5.9

Описание

statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

not-affected

esm-infra/xenial

not-affected

precise

not-affected

trusty

not-affected

trusty/esm

not-affected

upstream

needs-triage

vivid/stable-phone-overlay

not-affected

vivid/ubuntu-core

not-affected

xenial

not-affected

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
precise

not-affected

trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

Показывать по

EPSS

Процентиль: 95%
0.18978
Средний

7.1 High

CVSS2

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.7
redhat
почти 9 лет назад

statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.

CVSS3: 5.9
nvd
почти 9 лет назад

statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.

CVSS3: 5.9
debian
почти 9 лет назад

statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 befor ...

CVSS3: 5.9
github
больше 3 лет назад

statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.

CVSS3: 5.9
fstec
почти 9 лет назад

Уязвимость компонента statem/statem_dtls.c библиотеки OpenSSL, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 95%
0.18978
Средний

7.1 High

CVSS2

5.9 Medium

CVSS3