ALPINE-CVE-2016-2179
ALPINE-CVE-2016-2179
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.
CVSS 7.5 · High · Fix available
- Published
- Updated
Affected products and versions
openssl Alpine:v3.2
- Affected ranges
- ECOSYSTEM: < 1.0.2h-r3
Update to 1.0.2h-r3
openssl Alpine:v3.3
- Affected ranges
- ECOSYSTEM: < 1.0.2h-r3
Update to 1.0.2h-r3
openssl Alpine:v3.4
- Affected ranges
- ECOSYSTEM: < 1.0.2h-r3
Update to 1.0.2h-r3
openssl Alpine:v3.5
- Affected ranges
- ECOSYSTEM: < 1.0.2h-r3
Update to 1.0.2h-r3
openssl Alpine:v3.6
- Affected ranges
- ECOSYSTEM: < 1.0.2h-r3
Update to 1.0.2h-r3
openssl Alpine:v3.7
- Affected ranges
- ECOSYSTEM: < 1.0.2h-r3
Update to 1.0.2h-r3
openssl Alpine:v3.8
- Affected ranges
- ECOSYSTEM: < 1.0.2h-r3
Update to 1.0.2h-r3