Lucene search

K
redhatcveRedhat.comRH:CVE-2016-6309
HistorySep 26, 2016 - 10:42 a.m.

CVE-2016-6309

2016-09-2610:42:01
redhat.com
access.redhat.com
22

EPSS

0.911

Percentile

98.9%

statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.