DeutschShown in its original language — a full translation is planned for a future version.
OpenSSL: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2016-09-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6303US | critical9.8 | — | ||
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and applica… | ||||
| CVE-2016-6302US | high7.5 | — | ||
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cau… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16external
- Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19external
- Juniper Security Advisory JSA10770 vom 2017-01-12external
- Ubuntu Security Notice USN-3087-2 vom 2016-09-23external
- Red Hat Security Advisory RHSA-2016:1940 vom 2016-09-27external
- Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13external
- BLUECOAT Security Advisory SA135 vom 2016-12-01external
- BLUECOAT Security Advisory SA137 vom 2016-12-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan