Skip to content

CVE-2016-6307 The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consum...

MediumCVSS 5.9 EPSS 13.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.

Affected products

ProductAffected versionsFixed in
OpenSSL = 1.1.0 No fix listed

References