CVE-2016-6304
CVE-2016-6304
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
CVSS 7.5 · Alta · EPSS 63,0% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
openssl Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.2i-1
Actualiza a 1.0.2i-1
openssl Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.2i-1
Actualiza a 1.0.2i-1
openssl Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.2i-1
Actualiza a 1.0.2i-1
openssl Ubuntu:14.04:LTS
- Versiones
- 1.0.1e-3ubuntu1
- 1.0.1e-4ubuntu1
- 1.0.1e-4ubuntu2
- 1.0.1e-4ubuntu3
- 1.0.1e-4ubuntu4
- 1.0.1f-1ubuntu1
- 1.0.1f-1ubuntu2
- 1.0.1f-1ubuntu2.1
- 1.0.1f-1ubuntu2.2
- 1.0.1f-1ubuntu2.3
- 1.0.1f-1ubuntu2.4
- 1.0.1f-1ubuntu2.5
- 1.0.1f-1ubuntu2.7
- 1.0.1f-1ubuntu2.8
- 1.0.1f-1ubuntu2.11
- 1.0.1f-1ubuntu2.12
- 1.0.1f-1ubuntu2.15
- 1.0.1f-1ubuntu2.16
- 1.0.1f-1ubuntu2.17
- 1.0.1f-1ubuntu2.18
- 1.0.1f-1ubuntu2.19
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.1f-1ubuntu2.20
Actualiza a 1.0.1f-1ubuntu2.20
openssl Ubuntu:16.04:LTS
- Versiones
- 1.0.2d-0ubuntu1
- 1.0.2d-0ubuntu2
- 1.0.2e-1ubuntu1
- 1.0.2f-2ubuntu1
- 1.0.2g-1ubuntu2
- 1.0.2g-1ubuntu3
- 1.0.2g-1ubuntu4
- 1.0.2g-1ubuntu4.1
- 1.0.2g-1ubuntu4.2
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.2g-1ubuntu4.4
Actualiza a 1.0.2g-1ubuntu4.4
Fuentes originales
- https://www.openssl.org/news/secadv/20160922.txt
- https://www.tenable.com/security/tns-2016-20
- http://www.splunk.com/view/SP-CAAAPUE
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://rhn.redhat.com/errata/RHSA-2017-1659.html
- https://access.redhat.com/errata/RHSA-2017:1658
- http://rhn.redhat.com/errata/RHSA-2016-1940.html
- http://www.securityfocus.com/bid/93150
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
- http://rhn.redhat.com/errata/RHSA-2016-2802.html
- https://security.gentoo.org/glsa/201612-16
- https://access.redhat.com/errata/RHSA-2017:1801
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
- http://www.securitytracker.com/id/1036878
- http://www.splunk.com/view/SP-CAAAPSV
- https://access.redhat.com/errata/RHSA-2017:1413
- http://www-01.ibm.com/support/docview.wss?uid=swg21995039
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/
- https://www.tenable.com/security/tns-2016-16
- https://access.redhat.com/errata/RHSA-2017:2494
- http://www.securitytracker.com/id/1037640
- https://www.tenable.com/security/tns-2016-21
- https://nvd.nist.gov/vuln/detail/CVE-2016-6304