CVE-2016-6309 statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrar...
CriticalCVSS 9.8
EPSS 70.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSSL | = 1.1.0a | No fix listed |
References
- kb.juniper.net
- www-01.ibm.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- 93177 vdb-entry
- 1036885 vdb-entry
- bto.bluecoat.com
- git.openssl.org
- support.hpe.com
- www.openssl.org vendor-advisory
- www.tenable.com
- www.tenable.com
- Debian Security Tracker CVE-2016-6309 vendor-advisory