Skip to content

CVE-2016-6308 statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service...

MediumCVSS 5.9 EPSS 12.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.

Affected products

ProductAffected versionsFixed in
OpenSSL = 1.1.0 No fix listed

References