CVE

Id
93129  
CVE No.
CVE-2016-6309  
Status
Candidate  
Description
statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments