NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
21624  CVE-2016-7052  crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.    Medium  2017-02-06  2017-02-01  View
21113  CVE-2016-6307  The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.    4.3  Medium  2017-02-06  2017-02-01  View
21114  CVE-2016-6308  statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.    7.1  High  2017-02-06  2017-02-01  View
21115  CVE-2016-6309  statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.    10  High  2017-02-06  2017-02-01  View
21124  CVE-2016-6323  The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.    Medium  2017-02-06  2017-02-01  View

Page 15324 of 17672, showing 5 records out of 88360 total, starting on record 76616, ending on 76620

Actions