← All CVEs

CVE-2016-6306

medium · 5.9

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

5.9
CVSS
41.7%
EPSS (exploit prob.)
99th
EPSS percentile
2016-09-26
Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-125

Affected products

VendorProductAffected versions
opensslopenssl1.0.1
opensslopenssl1.0.1
opensslopenssl1.0.1
opensslopenssl1.0.1
opensslopenssl1.0.1a
opensslopenssl1.0.1b
opensslopenssl1.0.1c
opensslopenssl1.0.1d
opensslopenssl1.0.1e
opensslopenssl1.0.1f
opensslopenssl1.0.1g
opensslopenssl1.0.1h
opensslopenssl1.0.1i
opensslopenssl1.0.1j
opensslopenssl1.0.1k
opensslopenssl1.0.1l
opensslopenssl1.0.1m
opensslopenssl1.0.1n
opensslopenssl1.0.1o
opensslopenssl1.0.1p
opensslopenssl1.0.1q
opensslopenssl1.0.1r
opensslopenssl1.0.1s
opensslopenssl1.0.1t
hpicewall_federation_agent3.0
hpicewall_mcrp3.0
hpicewall_sso10.0
hpicewall_sso10.0
hpicewall_sso_agent_option10.0
novellsuse_linux_enterprise_module_for_web_scripting12.0
opensslopenssl1.0.2
opensslopenssl1.0.2
opensslopenssl1.0.2
opensslopenssl1.0.2
opensslopenssl1.0.2a
opensslopenssl1.0.2b
opensslopenssl1.0.2c
opensslopenssl1.0.2d
opensslopenssl1.0.2e
opensslopenssl1.0.2f

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-6306