NVD

Id
18449  
Name
CVE-2016-2179  
Description
The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-02-28  
Published
2016-09-16  
Modified Date
2017-02-23  
Seq
2016-2179  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102525 18449 CVE-2016-2179 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
102526 18449 CVE-2016-2179 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
102527 18449 CVE-2016-2179 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
102528 18449 CVE-2016-2179 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
102529 18449 CVE-2016-2179 92987  View
102530 18449 CVE-2016-2179 http://www.splunk.com/view/SP-CAAAPSV  View
102531 18449 CVE-2016-2179 http://www.splunk.com/view/SP-CAAAPUE  View
102532 18449 CVE-2016-2179 https://bto.bluecoat.com/security-advisory/sa132  View
102533 18449 CVE-2016-2179 https://git.openssl.org/?p=openssl.git;a=commit;h=f5c7f5dfbaf0d2f7d946d0fe86f08e6bcb36ed0d  View
102534 18449 CVE-2016-2179 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4005 JVNDB-2016-004778 OpenSSL の DTLS の実装におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の DTLS の実装は、未使用の順番通りではないメッセージに関連付けられたキューのエントリのライフタイムを適切に制限しないため、サービス運用妨害 (メモリ消費) 状態にされる脆弱性が存在します。 CVE-2016-2179 88685 CVE-2016-2179 18449 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004778.html 2016-08-22 2016-11-17 View