CVE

Id
93125  
CVE No.
CVE-2016-6305  
Status
Candidate  
Description
The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792766 93125 CVE-2016-6305 CONFIRM:https://git.openssl.org/?p=openssl.git;a=commit;h=63658103d4441924f8dbfc517b99bb54758a98b9  View
792767 93125 CVE-2016-6305 CONFIRM:https://github.com/openssl/openssl/issues/1563  View
792768 93125 CVE-2016-6305 CONFIRM:https://www.openssl.org/news/secadv/20160922.txt  View
792769 93125 CVE-2016-6305 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
792770 93125 CVE-2016-6305 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
792771 93125 CVE-2016-6305 CONFIRM:https://bto.bluecoat.com/security-advisory/sa132  View
792772 93125 CVE-2016-6305 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21995039  View
792773 93125 CVE-2016-6305 CONFIRM:https://www.tenable.com/security/tns-2016-16  View
792774 93125 CVE-2016-6305 GENTOO:GLSA-201612-16  View
792775 93125 CVE-2016-6305 URL:https://security.gentoo.org/glsa/201612-16  View
792776 93125 CVE-2016-6305 BID:93149  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5484 JVNDB-2016-006257 phpMyAdmin の変換機能におけるサービス運用妨害 (DoS) の脆弱性 phpMyAdmin の変換機能には、サーバに対してサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2016-6618 93125 4 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006257.html  View