DeutschShown in its original language — a full translation is planned for a future version.
OpenSSL: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2016-08-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-2182US | critical9.8 | — | ||
The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-… | ||||
| CVE-2016-2181US | high7.5 | — | ||
The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remo… | ||||
| CVE-2016-2179US | high7.5 | — | ||
The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13external
- Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16external
- Update des CISCO Security Advisory CISCO-SA-20160927-OPENSSL vom 2016-10-19external
- Juniper Security Advisory JSA10770 vom 2017-01-12external
- Security Tracker #1036688 vom 2016-08-25external
- Security Tracker #1036689 vom 2016-08-25external
- Security Tracker #1036690 vom 2016-08-25external
- Ubuntu Security Notice USN-3087-2 vom 2016-09-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan