p PatchFirst

ALPINE-CVE-2016-7052

ALPINE-CVE-2016-7052

This page contains facts from public vulnerability sources. Check the original advisory before updating.

crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • openssl Alpine:v3.2

    Affected ranges
    • ECOSYSTEM: < 1.0.2j-r0

    Update to 1.0.2j-r0

  • openssl Alpine:v3.3

    Affected ranges
    • ECOSYSTEM: < 1.0.2j-r0

    Update to 1.0.2j-r0

  • openssl Alpine:v3.4

    Affected ranges
    • ECOSYSTEM: < 1.0.2j-r0

    Update to 1.0.2j-r0

Original sources

Check your server →