CVE

Id
93126  
CVE No.
CVE-2016-6306  
Status
Candidate  
Description
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792777 93126 CVE-2016-6306 CONFIRM:https://git.openssl.org/?p=openssl.git;a=commit;h=52e623c4cb06fffa9d5e75c60b34b4bc130b12e9  View
792778 93126 CVE-2016-6306 CONFIRM:https://www.openssl.org/news/secadv/20160922.txt  View
792779 93126 CVE-2016-6306 CONFIRM:https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/  View
792780 93126 CVE-2016-6306 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448  View
792781 93126 CVE-2016-6306 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
792782 93126 CVE-2016-6306 CONFIRM:http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
792783 93126 CVE-2016-6306 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
792784 93126 CVE-2016-6306 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
792785 93126 CVE-2016-6306 CONFIRM:https://bto.bluecoat.com/security-advisory/sa132  View
792786 93126 CVE-2016-6306 CONFIRM:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312  View
792787 93126 CVE-2016-6306 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21995039  View
792788 93126 CVE-2016-6306 CONFIRM:https://www.tenable.com/security/tns-2016-16  View
792789 93126 CVE-2016-6306 GENTOO:GLSA-201612-16  View
792790 93126 CVE-2016-6306 URL:https://security.gentoo.org/glsa/201612-16  View
792791 93126 CVE-2016-6306 SUSE:SUSE-SU-2016:2470  View
792792 93126 CVE-2016-6306 URL:http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html  View
792793 93126 CVE-2016-6306 BID:93153  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5485 JVNDB-2016-006258 phpMyAdmin のユーザインターフェースの preference 機能における SQL インジェクションの脆弱性 phpMyAdmin のユーザインターフェースの preference 機能には、control user のアカウントに対してSQL インジェクション攻撃を実行される脆弱性が存在します。 CVE-2016-6619 93126 6.5 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006258.html  View