CVE

Id
93127  
CVE No.
CVE-2016-6307  
Status
Candidate  
Description
The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792794 93127 CVE-2016-6307 CONFIRM:https://git.openssl.org/?p=openssl.git;a=commit;h=4b390b6c3f8df925dc92a3dd6b022baa9a2f4650  View
792795 93127 CVE-2016-6307 CONFIRM:https://www.openssl.org/news/secadv/20160922.txt  View
792796 93127 CVE-2016-6307 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
792797 93127 CVE-2016-6307 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
792798 93127 CVE-2016-6307 CONFIRM:https://bto.bluecoat.com/security-advisory/sa132  View
792799 93127 CVE-2016-6307 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21995039  View
792800 93127 CVE-2016-6307 CONFIRM:https://www.tenable.com/security/tns-2016-16  View
792801 93127 CVE-2016-6307 BID:93152  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5486 JVNDB-2016-006259 phpMyAdmin における任意のコードを実行される脆弱性 phpMyAdmin は、いくつかのデータを有効なシリアル化データであることの検証なしに PHP unserialize() 関数に渡すため、任意のコードを実行される脆弱性が存在します。 CVE-2016-6620 93127 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006259.html  View