NVD

Id
21108  
Name
CVE-2016-6302  
Description
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-02-28  
Published
2016-09-16  
Modified Date
2017-02-23  
Seq
2016-6302  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114901 21108 CVE-2016-6302 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759  View
114902 21108 CVE-2016-6302 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
114903 21108 CVE-2016-6302 http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html  View
114904 21108 CVE-2016-6302 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html  View
114905 21108 CVE-2016-6302 http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html  View
114906 21108 CVE-2016-6302 92628  View
114907 21108 CVE-2016-6302 http://www.splunk.com/view/SP-CAAAPSV  View
114908 21108 CVE-2016-6302 http://www.splunk.com/view/SP-CAAAPUE  View
114909 21108 CVE-2016-6302 https://bto.bluecoat.com/security-advisory/sa132  View
114910 21108 CVE-2016-6302 https://git.openssl.org/?p=openssl.git;a=commit;h=e97763c92c655dcf4af2860b3abd2bc4c8a267f9  View
114911 21108 CVE-2016-6302 https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4008 JVNDB-2016-004781 OpenSSL の ssl/t1_lib.c の tls_decrypt_ticket 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の ssl/t1_lib.c の tls_decrypt_ticket 関数は、チケット長の検証中に HMAC のサイズを考慮しないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2016-6302 92809 CVE-2016-6302 21108 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004781.html 2016-08-24 2016-11-17 View