NVD

Id
17159  
Name
CVE-2016-0798  
Description
Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-03-03  
Modified Date
2016-12-27  
Seq
2016-0798  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95399 17159 CVE-2016-0798 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
95400 17159 CVE-2016-0798 SUSE-SU-2016:0617  View
95401 17159 CVE-2016-0798 SUSE-SU-2016:0620  View
95402 17159 CVE-2016-0798 SUSE-SU-2016:0621  View
95403 17159 CVE-2016-0798 openSUSE-SU-2016:0627  View
95404 17159 CVE-2016-0798 openSUSE-SU-2016:0628  View
95405 17159 CVE-2016-0798 openSUSE-SU-2016:0637  View
95406 17159 CVE-2016-0798 openSUSE-SU-2016:0638  View
95407 17159 CVE-2016-0798 http://openssl.org/news/secadv/20160301.txt  View
95408 17159 CVE-2016-0798 20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016  View
95409 17159 CVE-2016-0798 DSA-3500  View
95410 17159 CVE-2016-0798 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
95411 17159 CVE-2016-0798 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
95412 17159 CVE-2016-0798 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
95413 17159 CVE-2016-0798 83705  View
95414 17159 CVE-2016-0798 91787  View
95415 17159 CVE-2016-0798 USN-2914-1  View
95416 17159 CVE-2016-0798 https://git.openssl.org/?p=openssl.git;a=commit;h=259b664f950c2ba66fbf4b0fe5281327904ead21  View
95417 17159 CVE-2016-0798 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168  View
95418 17159 CVE-2016-0798 GLSA-201603-15  View
95419 17159 CVE-2016-0798 https://www.openssl.org/news/secadv/20160301.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
842 JVNDB-2016-001615 OpenSSL の SRP_VBASE_get_by_user の実装におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の SRP_VBASE_get_by_user の実装には、apps/s_server.c および crypto/srp/srp_vfy.c に関する処理に不備があるため、メモリリークにより、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2016-0798 87002 CVE-2016-0798 17159 7.8 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001615.html 2016-03-01 2016-11-22 View