Lucene search
F5F5:K09422508HistoryOct 19, 2016 - 12:00 a.m.
K09422508 : OpenSSL vulnerabilities CVE-2016-6307 and CVE-2016-6308
2016-10-1900:00:00
my.f5.com
38
Security Advisory Description
The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.
statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
hackerone
hackerone
openvas
openvas
OpenSSL SSL_peek hang on empty record DoS Vulnerability - Linux
2016-09-26 00:00:00
OpenSSL SSL_peek hang on empty record DoS Vulnerability - Windows
2016-09-26 00:00:00
Slackware: Security Advisory (SSA:2016-266-01)
2022-04-21 00:00:00
f5
f5
nessus
nessus
OpenSSL < 1.1.0a Multiple Vulnerabilities
2016-10-06 00:00:00
OpenSSL 1.1.0 < 1.1.0a Multiple Vulnerabilities
2016-09-30 00:00:00
Slackware 14.0 / 14.1 / 14.2 / current : openssl (SSA:2016-266-01)
2016-09-23 00:00:00
ubuntucve
ubuntucve
CVE-2016-6308
2016-09-26 00:00:00
CVE-2016-6307
2016-09-26 00:00:00
cvelist
cvelist
CVE-2016-6308
2016-09-26 00:00:00
CVE-2016-6307
2016-09-26 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2016-6308
2016-09-21 00:00:00
Vulnerability in OpenSSL CVE-2016-6307
2016-09-21 00:00:00
Vulnerability in OpenSSL CVE-2016-6309
2016-09-26 00:00:00
redhatcve
redhatcve
CVE-2016-6308
2016-09-22 15:47:44
CVE-2016-6307
2016-09-22 15:17:54
nvd
nvd
CVE-2016-6308
2016-09-26 19:59:05
CVE-2016-6307
2016-09-26 19:59:04
prion
prion
Code injection
2016-09-26 19:59:00
Design/Logic Flaw
2016-09-26 19:59:00
cve
cve
CVE-2016-6307
2016-09-26 19:59:04
CVE-2016-6308
2016-09-26 19:59:05
debiancve
debiancve
CVE-2016-6308
2016-09-26 19:59:05
CVE-2016-6307
2016-09-26 19:59:04
ibm
ibm
threatpost
threatpost
OpenSSL Fixes Critical Bug Introduced by Latest Update
2016-09-26 10:45:04
arista
arista
Security Advisory 0024
2016-10-04 00:00:00
fortinet
fortinet
OpenSSL Security Advisory [22 Sept 2016]
2017-04-03 00:00:00
slackware
slackware
[slackware-security] openssl
2016-09-22 18:53:12
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2016-09-22 00:00:00
symantec
symantec
SA132 : OpenSSL Vulnerabilities 22-Sep-2016 and 26-Sep-2016
2016-10-06 08:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016
2016-09-27 22:40:00
huawei
huawei
Security Advisory - Sixteen OpenSSL Vulnerabilities on Some Huawei products
2017-03-22 00:00:00
nodejsblog
nodejsblog
Security updates for all active release lines, September 2016
2016-09-23 00:00:00
mageia
mageia
Updated virtualbox packages fixes security vulnerabilities
2016-12-06 00:49:27
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00
Oracle Critical Patch Update - October 2016
2016-10-18 00:00:00
Oracle Critical Patch Update Advisory - January 2017
2017-01-17 00:00:00